2 matches found
CVE-2019-20896
WebChess 1.0 allows SQL injection via the messageFrom, gameID, opponent, messageID, or to parameter...
9.8CVSS7.3AI score0.0099EPSS
SaveExploits0References1
CVE-2019-20896: Improper Neutralization of Special Elements used in an SQL Command
WebChess 1.0 allows SQL injection via the messageFrom, gameID, opponent, messageID, or to parameter...
9.8CVSS5.8AI score0.0099EPSS
SaveExploits0References2
20