CVE-2010-5066: Undefined Security Weakness

The createRandomPassword function in includes/functionscommon.php in Virtual War aka VWar 1.6.1 R2 uses a small range of values to select the seed argument for the PHP mtsrand function, which makes it easier for remote attackers to determine randomly generated passwords via a brute-force attack...

CVE-2006-1602

CVE-2006-1602 describes a PHP remote file inclusion in includes/functions_common.php within the VWar Account module (vWar_Account) of PHPNuke Clan 3.0.1. The vulnerability allows remote attackers to include arbitrary files via a URL supplied to the vwar_root2 parameter. The issue is scoped to the...

CVE-2006-1602: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/functionscommon.php in the VWar Account module vWarAccount in PHPNuke Clan 3.0.1 allows remote attackers to include arbitrary files via a URL in the vwarroot2 parameter. NOTE: it is possible that this issue stems from a problem in VWar itself, b...