VWar 1.5 - news.php?vwar_root Remote File Inclusion

VWar 1.5 - news.php?vwarroot Remote File Inclusion source: https://www.securityfocus.com/bid/19387/info VWar is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrar...

VWar 1.5 - member.php?vwar_root Remote File Inclusion

VWar 1.5 - member.php?vwarroot Remote File Inclusion source: https://www.securityfocus.com/bid/19387/info VWar is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an...

VWar 1.5 - calendar.php?vwar_root Remote File Inclusion

VWar 1.5 - calendar.php?vwarroot Remote File Inclusion source: https://www.securityfocus.com/bid/19387/info VWar is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an...

VWar 1.5 - joinus.php?vwar_root Remote File Inclusion

VWar 1.5 - joinus.php?vwarroot Remote File Inclusion source: https://www.securityfocus.com/bid/19387/info VWar is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an...

VWar 1.5 - stats.php?vwar_root Remote File Inclusion

VWar 1.5 - stats.php?vwarroot Remote File Inclusion source: https://www.securityfocus.com/bid/19387/info VWar is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitra...

VWar 1.5 - 'challenge.php?vwar_root' Remote File Inclusion

source: https://www.securityfocus.com/bid/19387/info VWar is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and...

VWar 1.5 - 'war.php?vwar_root' Remote File Inclusion

source: https://www.securityfocus.com/bid/19387/info VWar is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and...

VWar 1.5 - 'calendar.php?vwar_root' Remote File Inclusion

source: https://www.securityfocus.com/bid/19387/info VWar is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and...

VWar 1.5 - 'joinus.php?vwar_root' Remote File Inclusion

source: https://www.securityfocus.com/bid/19387/info VWar is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and...

VWar 1.5 - 'member.php?vwar_root' Remote File Inclusion

source: https://www.securityfocus.com/bid/19387/info VWar is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and...

VWar 1.5 - 'news.php?vwar_root' Remote File Inclusion

source: https://www.securityfocus.com/bid/19387/info VWar is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and...

VWar 1.5 - 'stats.php?vwar_root' Remote File Inclusion

source: https://www.securityfocus.com/bid/19387/info VWar is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and...

VWar 1.x - war.php?page Cross-Site Scripting

VWar 1.x - war.php?page Cross-Site Scripting source: https://www.securityfocus.com/bid/19327/info Vwar is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues. These issues occur because the application fails to properly sanitize user-supplie...

VWar 1.x - war.php Multiple SQL Injections

VWar 1.x - war.php Multiple SQL Injections source: https://www.securityfocus.com/bid/19327/info Vwar is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues. These issues occur because the application fails to properly sanitize user-supplied...

Vwar v1.5.0 <= Sql Injection and XSS vuln.

IHST Iran HackerZ Security Team WhiteHat Part ------------------------------------------------- Vendor : www.vwar.de vuln. Version = v1.5.0 and lower Credits : MFox Contact : [email protected] HomePage : www.hackerz.ir ------------------------------------------------- Proof of Concept...

VWar 1.x - 'war.php?page' Cross-Site Scripting

source: https://www.securityfocus.com/bid/19327/info Vwar is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues. These issues occur because the application fails to properly sanitize user-supplied input. A successful exploit of these...

VWar 1.x - 'war.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/19327/info Vwar is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues. These issues occur because the application fails to properly sanitize user-supplied input. A successful exploit of these...

Update Protection against VWar Remote File Inclusion Vulnerability

Several vulnerabilities have been reported in Virtual War VWar due to input validation errors in several scripts. Remote attackers could exploit these vulnerabilities to include malicious files and compromise a vulnerable system...

CVE-2006-3139

CVE-2006-3139 concerns multiple SQL injection flaws in war.php of Virtual War (VWar) 1.5.0 R14 and earlier. The vulnerability arises in the war.php handler, where user-supplied input through the parameters (s, showgame, sortorder, sortby) is used to construct SQL queries, enabling remote attacker...

CVE-2006-2091

CVE-2006-2091 affects Virtual War (VWar) — specifically VWar 1.5 and all versions before 1.2. The issue is an information disclosure: an invalid vwar_root parameter causes an error message that reveals the server path. This is a remote-access concern with partial confidentiality impact and no int...