CVE-2023-22959

概要

参考情報

• chenan224/webchess_sqli_poc · Exploit
• sourceforge.net/p/webchess/bugs/84 · Third Party Advisory

webchess のその他の脆弱性

• CVE-2023-39851緊急 9.8webchess v1.0 was discovered to contain a SQL injection vulnerability via the $playerID parameter at mainmenu.php. NOTE: this is disputed by…
• CVE-2019-20896緊急 9.8WebChess 1.0 allows SQL injection via the messageFrom, gameID, opponent, messageID, or to parameter.