#84 SQLI/stored XSS vulnerabilities

[ac]

To the developers,

In the progress of our security research project, we found SQLI/stored XSS vulnerabilities in version 1.0.0 of the application. SQLI Related files: mainmenu.php. stored XSS related files: chess.php, opponentspassword.php

Please contact us at ca224test@gmail.com, so we can provide reproducing steps of the vulnerabilities.
Thank you.

[ac]

we further found request race vulnerabilities in version 1.0.0 of the application. Please contact us at ca224test@gmail.com, so we can provide reproducing steps of the vulnerabilities.

[spacewave]