webchess project records
3 published records for vendor webchess project.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Attack profile
All records
3 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2023-22959No exploit | WebChess through 0.9.0 and 1.0.0.rc2 allows SQL injection: mainmenu.php, chess.php, and opponentspassword.php (txtFirstName, txtLastName).webchess project · webchess · CWE-89 | High8.8 | — | 13.7% | Jan 11, 2023 |
39Monitor | CVE-2019-20896No exploit | WebChess 1.0 allows SQL injection via the messageFrom, gameID, opponent, messageID, or to parameter.webchess project · webchess · CWE-89 | Critical9.8 | — | 0.9% | Jul 7, 2020 |
39Monitor | CVE-2023-39851No exploit | webchess v1.0 was discovered to contain a SQL injection vulnerability via the $playerID parameter at mainmenu.php.webchess project · webchess · CWE-89 | Critical9.8 | — | 0.8% | Aug 15, 2023 |
- CVE-2023-2295939Monitor
WebChess through 0.9.0 and 1.0.0.rc2 allows SQL injection: mainmenu.php, chess.php, and opponentspassword.php (txtFirstName, txtLastName).
HighCVSS 8.8No exploitEPSS 13%webchess project · webchessJan 11, 2023
- CVE-2019-2089639Monitor
WebChess 1.0 allows SQL injection via the messageFrom, gameID, opponent, messageID, or to parameter.
CriticalCVSS 9.8No exploitEPSS 0%webchess project · webchessJul 7, 2020
- CVE-2023-3985139Monitor
webchess v1.0 was discovered to contain a SQL injection vulnerability via the $playerID parameter at mainmenu.php.
CriticalCVSS 9.8No exploitEPSS 0%webchess project · webchessAug 15, 2023