CVE-2019-20896 - WebChess 1.0 allows SQL injection via the messageFrom, gameID, opponent, messageID, or to parameter

CRITICAL

WebChess 1.0 allows SQL injection via the messageFrom, gameID, opponent, messageID, or to parameter

Published Jul 7, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 0.99%

WebChess 1.0 allows SQL injection via the messageFrom, gameID, opponent, messageID, or to parameter.

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

https://sourceforge.net/p/webchess/bugs/81/
x_refsource_CONFIRMIssue TrackingThird Party Advisory

Link	Providers	Tags
https://sourceforge.net/p/webchess/bugs/81/		x_refsource_CONFIRMIssue TrackingThird Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Jul 7, 2020

Updated Aug 5, 2024

Reserved Jul 7, 2020

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a