critical9.8
CVE-2019-20896
WebChess 1.0 allows SQL injection via the messageFrom, gameID, opponent, messageID, or to parameter.
Impact
WebChess 1.0 allows SQL injection via the messageFrom, gameID, opponent, messageID, or to parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Webchess Project | Webchess | Version 1.0 |