Multiple SQL injection vulnerabilities in AstroDog Press Some Chess 1.5-RC2 and earlier allow remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly including the gameID parameter in board.php.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Some_chess | Astrodog_press | 1.5_rc1 (including) | 1.5_rc1 (including) |
Some_chess | Astrodog_press | 1.5_rc2 (including) | 1.5_rc2 (including) |