high8.8
CVE-2023-22959
WebChess through 0.9.0 and 1.0.0.rc2 allows SQL injection: mainmenu.php, chess.php, and opponentspassword.php (txtFirstName, txtLastName).
Impact
WebChess through 0.9.0 and 1.0.0.rc2 allows SQL injection: mainmenu.php, chess.php, and opponentspassword.php (txtFirstName, txtLastName).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Webchess Project | Webchess | through 0.9.0 Version 1.0.0 |