25 matches found
CVE-2019-20896
WebChess 1.0 allows SQL injection via the messageFrom, gameID, opponent, messageID, or to parameter...
9.8CVSS0.0099EPSS
SaveExploits0References1
CVE-2019-20896
WebChess 1.0 allows SQL injection via the messageFrom, gameID, opponent, messageID, or to parameter...
9.8CVSS7.3AI score0.0099EPSS
SaveExploits0References1
Sql injection
WebChess 1.0 allows SQL injection via the messageFrom, gameID, opponent, messageID, or to parameter...
7.5CVSS9.8AI score0.0099EPSS
SaveExploits0References1Affected Software1
CVE-2019-20896
CVE-2019-20896 affects WebChess 1.0 and involves an SQL injection vulnerability exposed through the parameters: messageFrom, gameID, opponent, messageID, or to. The issue stems from insufficient input validation/parameter handling in WebChess 1.0, enabling an attacker to inject and execute arbitr...
9.8CVSS9.7AI score0.0099EPSS
SaveExploits0References1Affected Software1
20