Vulners
Lucene search
2 matches found
Design/Logic Flaw
The createRandomPassword function in includes/functionscommon.php in Virtual War aka VWar 1.6.1 R2 uses a small range of values to select the seed argument for the PHP mtsrand function, which makes it easier for remote attackers to determine randomly generated passwords via a brute-force attack...
4.3CVSS7.2AI score0.0025EPSS
Exploits1References2Affected Software1
CVE-2010-5066
The createRandomPassword function in includes/functionscommon.php in Virtual War aka VWar 1.6.1 R2 uses a small range of values to select the seed argument for the PHP mtsrand function, which makes it easier for remote attackers to determine randomly generated passwords via a brute-force attack...
6.7AI score0.0025EPSS
Exploits1References2
20