Description
Multiple SQL injection vulnerabilities in AstroDog Press Some Chess 1.5-RC2 and earlier allow remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly including the gameID parameter in board.php.
References
- http://sourceforge.net/forum/forum.php?forum_id=586734
- 20885 third-party-advisory
- 26784 vdb-entry
- somechess-sql-injection(27489) vdb-entry
- 18745 vdb-entry
- ADV-2006-2609 vdb-entry