Thanks, will look into it.
we further found request race vulnerabilities in version 1.0.0 of the application. Please contact us at ca224test@gmail.com, so we can provide reproducing steps of the vulnerabilities.
And furhtermore, it uses a lot of strings in Arrays without quotes, which is not anymore allowed under PHP8.0, e.g.: $CFG_TABLE[communication] = "communication"; instead of: $CFG_TABLE['communication'] = 'communication'; Cest dommage, car cet application etait tres sympa! Merci quand meme!
Not compatible with PHP 8.x
SQLI/stored XSS vulnerabilities
This PoC performs XSS attack via newMessage parameter (a POST variable) in sendingmessage.php.
XSS vulnerabilities
XSS vulnerabilities
Yup, I'm still around. :) And I agree. With both the CVE request and the fact that it should be fixed regardless. Still don't know when I'll have some time to spare, so I'll leave it without an assigned owner in case someone else wants to grab it.
Thanks! I haven't replied yet to the original sender... I guess I don't personally plan on requesting CVE numbers so unless you want to they can. I'm not sure if/when I could look into this but ideally I'd like to leave the WebChess code base without any known vulnerabilities. So no immediate plans to look into this but I am curious, so may take a look myself in the near future. Of course feel free to fix these if you have the time! ;-) And thanks for sticking around so long! Jonathan On Fri, Sep...
Ticket moved from /p/webchess/bugs/80/
Vulnerability to injections
PHP 5.6 or higher
btw... PHP version is 5.3
I have the exact same issue. Web chess version: WebChess_1.0.0rc2.zip The way it screws up is this: the chess board display completely disappears once one person captures 1 piece...and all the clickable buttons also become unusable once you enter the game to try to do a move. Plus...all the moves which had displayed down the side panel also are gone.
im using version 1.0 the one on the main page the game screws up like this: http://prntscr.com/ca16wj...
Hi Felix, Could you provide more details? What version are you using? (you mentioned...
Once Chess Piece dies, game screws up
Starting a new game
Bug in the config file creation with automatic tool
Hi, WebChess cannot find chessengine load file. How to solve this issues.Please let...
hi, WebChess cannot find chessengine load file. How to solve this issues.Please let...
I hit this problem too. To fix it, I had to add a newline after the first '<?php'...
<html> <head> <meta content="text/html; charset=windows-1252" http-equiv="Content-Type">...
Peter, what version of Webchess are you using?
Unfortunately the bug does indeed exist. Sometimes illegal moves do happen and seldom...
Hi, I am not a developer of WebChess, but have made some customizations for my private...
Hi there First of all excuse my bad english, is not my native language I have a forum...
Thanks for posting links to your repos. And thanks for keeping webchess alive (and...
I made several improvements to WebChess years ago and they are available on my Github...
My apologies for that last response, I was on my phone, and the information in it...
I made several improvements to WebChess years ago and they are available on my Github...
Hi all, I was looking for a PHP chess game last year and stumbled upon this one....
I wanted to change the language text shown on the Webchess webpages to Dutch. Unfortunately...
I wanted to change the language text shown on the Webchess webpages to Dutch. Unfortunately...
Great! Something worth to keep in mind as one may encounter it again in new environments/installations......
Hi, $_CONFIG must be set to true : $_CONFIG = true; Is it ok?
Hi Nicolas, When I passed to the mutualized server it works fine but not with wamp...
I don't understand as webchess.zip contains the files from http://lan7even.homenet.org:8080/public/webgames/webchess...
Hi Nicolas, I always have problems, can you send me files installed in your directory...
I placed it here: http://lan7even.homenet.org:8080/public/webgames/webchess.zip Don't...
Hi Nicolas, I always have the same problem I think that the available version for...
Parse error
Hello! I have installed WebChess on my server. I use paid virtual hosting. After...
My webchess server is sending out emails, but they don't appear to have a from email...
Just a quick note that I hit this exact same problem today, and managed to solve...
I am not quite sure as it is some time ago since I installed it on my home server...
I am not quite sure as it is some time ago since I installed it on my home server...
Hi Nicolas, I use the version 1.0.0rc2, I always have the same problem. You use what...
There has to be something wrong with your installation. For me this works without...
Hi, When I creat in the first page (NewAccount) I have this error message : Notice:...
Hi, When I creat in the first page (NewAccount) I have this erroe message : Notice:...