Activity for WebChess

Tianhao Bai created ticket #87

Tianhao Bai — Thu, 19 Mar 2026 09:25:41 -0000

[security vulnerability] SQL Injection vulnerabilities

Tianhao Bai created ticket #86

Tianhao Bai — Wed, 11 Mar 2026 07:26:30 -0000

[security vulnerability] Cross-Site Scripting (XSS) vulnerabilities

spacewave modified a comment on ticket #84

spacewave — Tue, 14 May 2024 00:30:17 -0000

spacewave posted a comment on ticket #84

spacewave — Tue, 07 May 2024 13:38:32 -0000

Thanks, will look into it.

ac posted a comment on ticket #84

ac — Tue, 07 May 2024 12:33:35 -0000

we further found request race vulnerabilities in version 1.0.0 of the application. Please contact us at ca224test@gmail.com, so we can provide reproducing steps of the vulnerabilities.

franc walter posted a comment on ticket #85

franc walter — Mon, 11 Mar 2024 12:07:36 -0000

And furhtermore, it uses a lot of strings in Arrays without quotes, which is not anymore allowed under PHP8.0, e.g.: $CFG_TABLE[communication] = "communication"; instead of: $CFG_TABLE['communication'] = 'communication'; Cest dommage, car cet application etait tres sympa! Merci quand meme!

franc walter created ticket #85

franc walter — Mon, 11 Mar 2024 12:03:35 -0000

Not compatible with PHP 8.x

ac created ticket #84

ac — Sun, 04 Dec 2022 19:43:37 -0000

SQLI/stored XSS vulnerabilities

Changhua LUO posted a comment on ticket #83

Changhua LUO — Thu, 19 Aug 2021 09:31:10 -0000

This PoC performs XSS attack via newMessage parameter (a POST variable) in sendingmessage.php.

Changhua LUO created ticket #83

Changhua LUO — Thu, 19 Aug 2021 09:11:21 -0000

XSS vulnerabilities

Changhua LUO created ticket #82

Changhua LUO — Thu, 19 Aug 2021 09:07:51 -0000

XSS vulnerabilities

Rodrigo Flores posted a comment on ticket #81

Rodrigo Flores — Fri, 06 Sep 2019 20:06:34 -0000

Yup, I'm still around. :) And I agree. With both the CVE request and the fact that it should be fixed regardless. Still don't know when I'll have some time to spare, so I'll leave it without an assigned owner in case someone else wants to grab it.

Jonathan Evraire posted a comment on ticket #81

Jonathan Evraire — Fri, 06 Sep 2019 16:11:11 -0000

Thanks! I haven't replied yet to the original sender... I guess I don't personally plan on requesting CVE numbers so unless you want to they can. I'm not sure if/when I could look into this but ideally I'd like to leave the WebChess code base without any known vulnerabilities. So no immediate plans to look into this but I am curious, so may take a look myself in the near future. Of course feel free to fix these if you have the time! ;-) And thanks for sticking around so long! Jonathan On Fri, Sep...

Rodrigo Flores posted a comment on ticket #49

Rodrigo Flores — Fri, 06 Sep 2019 15:52:13 -0000

Ticket moved from /p/webchess/bugs/80/

Rodrigo Flores created ticket #81

Rodrigo Flores — Fri, 06 Sep 2019 15:37:28 -0000

Vulnerability to injections

H M created ticket #80

H M — Wed, 17 May 2017 10:30:32 -0000

PHP 5.6 or higher

Rainen posted a comment on ticket #79

Rainen — Tue, 09 May 2017 09:04:01 -0000

btw... PHP version is 5.3

Lawrence Raisanen posted a comment on ticket #79

Lawrence Raisanen — Tue, 09 May 2017 08:24:35 -0000

I have the exact same issue. Web chess version: WebChess_1.0.0rc2.zip The way it screws up is this: the chess board display completely disappears once one person captures 1 piece...and all the clickable buttons also become unusable once you enter the game to try to do a move. Plus...all the moves which had displayed down the side panel also are gone.

Felix Doan posted a comment on ticket #79

Felix Doan — Wed, 24 Aug 2016 23:27:49 -0000

im using version 1.0 the one on the main page the game screws up like this: http://prntscr.com/ca16wj...

Rodrigo Flores posted a comment on ticket #79

Rodrigo Flores — Wed, 24 Aug 2016 14:21:22 -0000

Hi Felix, Could you provide more details? What version are you using? (you mentioned...

Felix Doan created ticket #79

Felix Doan — Wed, 24 Aug 2016 13:47:31 -0000

Once Chess Piece dies, game screws up

Luigi Usai created ticket #78

Luigi Usai — Sun, 15 May 2016 17:17:33 -0000

Starting a new game

Luigi Usai created ticket #77

Luigi Usai — Sun, 15 May 2016 14:49:41 -0000

Bug in the config file creation with automatic tool

Anima Mahato modified a comment on ticket #34

Anima Mahato — Tue, 16 Feb 2016 05:49:11 -0000

Hi, WebChess cannot find chessengine load file. How to solve this issues.Please let...

Anima Mahato posted a comment on ticket #34

Anima Mahato — Tue, 16 Feb 2016 05:47:06 -0000

hi, WebChess cannot find chessengine load file. How to solve this issues.Please let...

B X-K posted a comment on ticket #11

B X-K — Wed, 30 Dec 2015 03:14:48 -0000

I hit this problem too. To fix it, I had to add a newline after the first '

WebChess released /OldFiles/WebChess_v0.9.0.zip

WebChess — Mon, 19 Jan 2015 12:26:59 -0000

Peter Kruger posted a comment on ticket #55

Peter Kruger — Thu, 08 Jan 2015 22:00:14 -0000

...

Rodrigo Flores posted a comment on ticket #55

Rodrigo Flores — Thu, 08 Jan 2015 17:32:50 -0000

Peter, what version of Webchess are you using?

Peter Kruger posted a comment on ticket #55

Peter Kruger — Tue, 30 Dec 2014 12:37:19 -0000

Unfortunately the bug does indeed exist. Sometimes illegal moves do happen and seldom...

NSK posted a comment on discussion Open Discussion

NSK — Wed, 26 Nov 2014 18:50:18 -0000

Hi, I am not a developer of WebChess, but have made some customizations for my private...

Connle posted a comment on discussion Open Discussion

Connle — Wed, 26 Nov 2014 05:38:11 -0000

Hi there First of all excuse my bad english, is not my native language I have a forum...

Rodrigo Flores posted a comment on discussion Open Discussion

Rodrigo Flores — Tue, 08 Jul 2014 14:24:30 -0000

Thanks for posting links to your repos. And thanks for keeping webchess alive (and...

Benjam modified a comment on discussion Open Discussion

Benjam — Mon, 07 Jul 2014 18:59:25 -0000

I made several improvements to WebChess years ago and they are available on my Github...

Benjam posted a comment on discussion Open Discussion

Benjam — Mon, 07 Jul 2014 18:58:35 -0000

My apologies for that last response, I was on my phone, and the information in it...

Benjam posted a comment on discussion Open Discussion

Benjam — Mon, 07 Jul 2014 16:00:38 -0000

I made several improvements to WebChess years ago and they are available on my Github...

sourcejake posted a comment on discussion Open Discussion

sourcejake — Sat, 05 Jul 2014 00:22:22 -0000

Hi all, I was looking for a PHP chess game last year and stumbled upon this one....

Peter posted a comment on discussion Help

Peter — Fri, 28 Feb 2014 22:33:32 -0000

I wanted to change the language text shown on the Webchess webpages to Dutch. Unfortunately...

Peter posted a comment on discussion Help

Peter — Fri, 28 Feb 2014 22:29:49 -0000

I wanted to change the language text shown on the Webchess webpages to Dutch. Unfortunately...

NSK posted a comment on discussion Open Discussion

NSK — Tue, 25 Feb 2014 17:02:22 -0000

Great! Something worth to keep in mind as one may encounter it again in new environments/installations......

EAmine posted a comment on discussion Help

EAmine — Tue, 25 Feb 2014 15:36:56 -0000

Hi, $_CONFIG must be set to true : $_CONFIG = true; Is it ok?

EAmine posted a comment on discussion Open Discussion

EAmine — Tue, 25 Feb 2014 13:59:10 -0000

Hi Nicolas, When I passed to the mutualized server it works fine but not with wamp...

NSK posted a comment on discussion Open Discussion

NSK — Thu, 20 Feb 2014 18:42:07 -0000

I don't understand as webchess.zip contains the files from http://lan7even.homenet.org:8080/public/webgames/webchess...

EAmine posted a comment on discussion Open Discussion

EAmine — Thu, 20 Feb 2014 14:25:41 -0000

Hi Nicolas, I always have problems, can you send me files installed in your directory...

NSK posted a comment on discussion Open Discussion

NSK — Sat, 15 Feb 2014 19:30:09 -0000

I placed it here: http://lan7even.homenet.org:8080/public/webgames/webchess.zip Don't...

EAmine posted a comment on discussion Open Discussion

EAmine — Sat, 15 Feb 2014 19:13:36 -0000

Hi Nicolas, I always have the same problem I think that the available version for...

created ticket #11

Thu, 13 Feb 2014 10:03:53 -0000

Parse error

posted a comment on discussion Help

Thu, 13 Feb 2014 10:00:29 -0000

Hello! I have installed WebChess on my server. I use paid virtual hosting. After...

Trevor Bradley posted a comment on discussion Help

Trevor Bradley — Sat, 08 Feb 2014 18:59:58 -0000

My webchess server is sending out emails, but they don't appear to have a from email...

Trevor Bradley posted a comment on discussion Help

Trevor Bradley — Wed, 05 Feb 2014 07:16:40 -0000

Just a quick note that I hit this exact same problem today, and managed to solve...

NSK modified a comment on discussion Open Discussion

NSK — Sat, 01 Feb 2014 18:14:40 -0000

I am not quite sure as it is some time ago since I installed it on my home server...

NSK posted a comment on discussion Open Discussion

NSK — Sat, 01 Feb 2014 18:11:54 -0000

I am not quite sure as it is some time ago since I installed it on my home server...

EAmine posted a comment on discussion Open Discussion

EAmine — Sat, 01 Feb 2014 10:44:36 -0000

Hi Nicolas, I use the version 1.0.0rc2, I always have the same problem. You use what...

NSK posted a comment on discussion Open Discussion

NSK — Mon, 27 Jan 2014 17:20:05 -0000

There has to be something wrong with your installation. For me this works without...

EAmine posted a comment on discussion Open Discussion

EAmine — Mon, 27 Jan 2014 09:28:09 -0000

Hi, When I creat in the first page (NewAccount) I have this error message : Notice:...

amine eleuldj posted a comment on discussion Help

amine eleuldj — Sat, 25 Jan 2014 11:15:07 -0000

Hi, When I creat in the first page (NewAccount) I have this erroe message : Notice:...