Webchess Project Webchess
3 CVEs affecting Webchess Project Webchess. Latest disclosed: 2023-08-15. Critical: 2, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-39851 | Critical | 9.8 | 2023-08-15 | webchess v1.0 was discovered to contain a SQL injection vulnerability via the $playerID parameter at mainmenu.php. NOTE: this is disputed by a third party who… |
CVE-2019-20896 | Critical | 9.8 | 2020-07-07 | WebChess 1.0 allows SQL injection via the messageFrom, gameID, opponent, messageID, or to parameter. |
CVE-2023-22959 | High | 8.8 | 2023-01-11 | WebChess through 0.9.0 and 1.0.0.rc2 allows SQL injection: mainmenu.php, chess.php, and opponentspassword.php (txtFirstName, txtLastName). |