Vulnerabilities

TI-2006-03377 CVE-2006-3485 · GHSA-fcqm-9mj2-pr6f

Multiple SQL injection vulnerabilities in AstroDog Press Some Chess 1.5-RC2 and earlier…

LOW 36

Multiple SQL injection vulnerabilities in AstroDog Press Some Chess 1.5-RC2 and earlier allow remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly including the gameID parameter in board.p…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01447 Published 2006-07-10 No fix listed

TI-2006-03172 CVE-2006-3273 · GHSA-hrgc-rm2v-jrhq

Cross-site scripting (XSS) vulnerability in menu.php in Some Chess 1.5 rc1 allows remote…

LOW 16

Cross-site scripting (XSS) vulnerability in menu.php in Some Chess 1.5 rc1 allows remote attackers to inject arbitrary web script or HTML via the user parameter ("New Name" field).

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.01293 Published 2006-06-28 No fix listed

TI-2006-03171 CVE-2006-3272 · GHSA-3785-fr5f-46qr

Cross-site request forgery (CSRF) vulnerability in menu.php in Some Chess 1.5 rc2 allows…

LOW 25

Cross-site request forgery (CSRF) vulnerability in menu.php in Some Chess 1.5 rc2 allows remote attackers to conduct actions as another user, such as changing usernames and passwords, via unspecified vectors.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01044 Published 2006-06-28 No fix listed

Vulnerabilities

Filters

Multiple SQL injection vulnerabilities in AstroDog Press Some Chess 1.5-RC2 and earlier…

Cross-site scripting (XSS) vulnerability in menu.php in Some Chess 1.5 rc1 allows remote…

Cross-site request forgery (CSRF) vulnerability in menu.php in Some Chess 1.5 rc2 allows…