Activity for WebChess
-
Tianhao Bai created ticket #87
[security vulnerability] SQL Injection vulnerabilities
-
[security vulnerability] Cross-Site Scripting (XSS) vulnerabilities
-
spacewave modified a comment on ticket #84
-
Thanks, will look into it.
-
ac posted a comment on ticket #84
we further found request race vulnerabilities in version 1.0.0 of the application. Please contact us at ca224test@gmail.com, so we can provide reproducing steps of the vulnerabilities.
-
franc walter posted a comment on ticket #85
And furhtermore, it uses a lot of strings in Arrays without quotes, which is not anymore allowed under PHP8.0, e.g.: $CFG_TABLE[communication] = "communication"; instead of: $CFG_TABLE['communication'] = 'communication'; Cest dommage, car cet application etait tres sympa! Merci quand meme!
-
Not compatible with PHP 8.x
-
SQLI/stored XSS vulnerabilities
-
Changhua LUO posted a comment on ticket #83
This PoC performs XSS attack via newMessage parameter (a POST variable) in sendingmessage.php.
-
XSS vulnerabilities
-
XSS vulnerabilities
-
Rodrigo Flores posted a comment on ticket #81
Yup, I'm still around. :) And I agree. With both the CVE request and the fact that it should be fixed regardless. Still don't know when I'll have some time to spare, so I'll leave it without an assigned owner in case someone else wants to grab it.
-
Jonathan Evraire posted a comment on ticket #81
Thanks! I haven't replied yet to the original sender... I guess I don't personally plan on requesting CVE numbers so unless you want to they can. I'm not sure if/when I could look into this but ideally I'd like to leave the WebChess code base without any known vulnerabilities. So no immediate plans to look into this but I am curious, so may take a look myself in the near future. Of course feel free to fix these if you have the time! ;-) And thanks for sticking around so long! Jonathan On Fri, Sep...
-
Ticket moved from /p/webchess/bugs/80/
-
Vulnerability to injections
-
H M created ticket #80
PHP 5.6 or higher
-
Rainen posted a comment on ticket #79
btw... PHP version is 5.3
-
I have the exact same issue. Web chess version: WebChess_1.0.0rc2.zip The way it screws up is this: the chess board display completely disappears once one person captures 1 piece...and all the clickable buttons also become unusable once you enter the game to try to do a move. Plus...all the moves which had displayed down the side panel also are gone.
-
Felix Doan posted a comment on ticket #79
im using version 1.0 the one on the main page the game screws up like this: http://prntscr.com/ca16wj...
-
Hi Felix, Could you provide more details? What version are you using? (you mentioned...
-
Once Chess Piece dies, game screws up
-
Luigi Usai created ticket #78
Starting a new game
-
Bug in the config file creation with automatic tool
-
Anima Mahato modified a comment on ticket #34
Hi, WebChess cannot find chessengine load file. How to solve this issues.Please let...
-
hi, WebChess cannot find chessengine load file. How to solve this issues.Please let...
-
B X-K posted a comment on ticket #11
I hit this problem too. To fix it, I had to add a newline after the first '<?php'...
-
WebChess released /OldFiles/WebChess_v0.9.0.zip
-
Peter Kruger posted a comment on ticket #55
<html> <head> <meta content="text/html; charset=windows-1252" http-equiv="Content-Type">...
-
Peter, what version of Webchess are you using?
-
Unfortunately the bug does indeed exist. Sometimes illegal moves do happen and seldom...
-
NSK posted a comment on discussion Open Discussion
Hi, I am not a developer of WebChess, but have made some customizations for my private...
-
Connle posted a comment on discussion Open Discussion
Hi there First of all excuse my bad english, is not my native language I have a forum...
-
Thanks for posting links to your repos. And thanks for keeping webchess alive (and...
-
Benjam modified a comment on discussion Open Discussion
I made several improvements to WebChess years ago and they are available on my Github...
-
My apologies for that last response, I was on my phone, and the information in it...
-
I made several improvements to WebChess years ago and they are available on my Github...
-
sourcejake posted a comment on discussion Open Discussion
Hi all, I was looking for a PHP chess game last year and stumbled upon this one....
-
I wanted to change the language text shown on the Webchess webpages to Dutch. Unfortunately...
-
I wanted to change the language text shown on the Webchess webpages to Dutch. Unfortunately...
-
Great! Something worth to keep in mind as one may encounter it again in new environments/installations......
-
EAmine posted a comment on discussion Help
Hi, $_CONFIG must be set to true : $_CONFIG = true; Is it ok?
-
Hi Nicolas, When I passed to the mutualized server it works fine but not with wamp...
-
I don't understand as webchess.zip contains the files from http://lan7even.homenet.org:8080/public/webgames/webchess...
-
Hi Nicolas, I always have problems, can you send me files installed in your directory...
-
I placed it here: http://lan7even.homenet.org:8080/public/webgames/webchess.zip Don't...
-
Hi Nicolas, I always have the same problem I think that the available version for...
-
<REDACTED> created ticket #11
Parse error
-
<REDACTED> posted a comment on discussion Help
Hello! I have installed WebChess on my server. I use paid virtual hosting. After...
-
Trevor Bradley posted a comment on discussion Help
My webchess server is sending out emails, but they don't appear to have a from email...
-
Just a quick note that I hit this exact same problem today, and managed to solve...
-
I am not quite sure as it is some time ago since I installed it on my home server...
-
I am not quite sure as it is some time ago since I installed it on my home server...
-
Hi Nicolas, I use the version 1.0.0rc2, I always have the same problem. You use what...
-
There has to be something wrong with your installation. For me this works without...
-
Hi, When I creat in the first page (NewAccount) I have this error message : Notice:...
-
Hi, When I creat in the first page (NewAccount) I have this erroe message : Notice:...
