CVE-2019-20896

WebChess 1.0 allows SQL injection via the messageFrom, gameID, opponent, messageID, or to parameter.

View Full Alert

Related Posts

  • CVE-2019-19935

    Froala Editor before 3.0.6 allows XSS. View Full Alert

  • CVE-2019-13285

    CoSoSys Endpoint Protector 5.1.0.2 allows Host Header Injection. View Full Alert

  • CVE-2019-17230

    includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress allows unauthenticated options changes. View Full Alert