CVE-2023-22959

HIGH

WebChess <= 0.9.0 and 1.0.0.rc2 - SQL Injection via txtFirstName and txtLastName Parameters

Title source: llm

WebChess through 0.9.0 and 1.0.0.rc2 allows SQL injection: mainmenu.php, chess.php, and opponentspassword.php (txtFirstName, txtLastName).

Core 2

Core References

Exploit, Third Party Advisory

Third Party Advisory

CVSS v3 8.8

EPSS 0.1370

EPSS Percentile 96.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Vulnrichment

Exploitation none

Automatable yes

Technical Impact total

CWE

CWE-89

Status published

Products (2)

webchess_project/webchess 1.0.0 rc2

webchess_project/webchess < 0.9.0

Published Jan 11, 2023

Tracked Since Feb 18, 2026