VWar 1.x war.php Multiple Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/19327/info Vwar is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues. These issues occur because the application fails to properly sanitize user-supplied input. A...

CVE-2006-4010

CVE-2006-4010 describes a SQL injection vulnerability in war.php of Virtual War (VWar) 1.5.0 and earlier, allowing remote attackers to execute arbitrary SQL commands through the page parameter. The vulnerability is explicitly part of a broader issue with VWar, with related vectors covered by CVE-...

CVE-2006-4009: Undefined Security Weakness

Cross-site scripting XSS vulnerability in war.php in Virtual War Vwar 1.5.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2006-4010: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in war.php in Virtual War Vwar 1.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter. NOTE: other vectors are covered by CVE-2006-3139...

VWar 1.x - 'war.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/19327/info Vwar is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues. These issues occur because the application fails to properly sanitize user-supplied input. A successful exploit of these...

CVE-2006-3139: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in war.php in Virtual War VWar 1.5.0 R14 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 s, 2 showgame, 3 sortorder, and 4 sortby parameters...

Virtual War File İnclusion

Virtual War File nclusion --------------------------------- Site:http://www.vwar.de/ Demo:http://www.vwar.de/demo/ --------------------------------------- File nclusion // get functions $vwarroot = "./"; require $vwarroot . "includes/functionscommon.php"; require $vwarroot...