GCVE - cpe:2.3:a:vwar:virtual_war:1.5.0

Approved changes feed: RSS · Atom

cpe:2.3:a:vwar:virtual_war:1.5.0_r8:*:*:*:*:*:*:*

part: a version: 1.5.0_r8 update: *

Vendor	Vwar (`128d0fdd-f5f1-5b82-a5e4-250ef3fdf222`)
Product	Virtual War (`f5250010-9ecf-5a8e-878e-d767bba427a8`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-4142`	vulnerable	2026-06-08 04:49:11.058648	Details available SQL injection vulnerability in extra/online.php in Virtual War (VWar) 1.5.0 R14 and earlier allows remote attackers to execute arbitrary SQL commands via the n parameter. Published: 2006-08-14T23:00:00.000Z Updated: 2024-08-07T18:57:46.156Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/2170 http://www.securityfocus.com/bid/19472 http://www.securityfocus.com/archive/1/442989/100/0/threaded http://www.attrition.org/pipermail/vim/2007-April/001519.html https://exchange.xforce.ibmcloud.com/vulnerabilities/28323	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3139`	vulnerable	2026-06-08 04:49:08.428444	Details available Multiple SQL injection vulnerabilities in war.php in Virtual War (VWar) 1.5.0 R14 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) s, (2) showgame, (3) sortorder, and (4) sortby parameters. Published: 2006-06-22T22:00:00.000Z Updated: 2024-08-07T18:16:05.778Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/443171/100/0/threaded http://www.securityfocus.com/archive/1/488118/100/200/threaded https://exchange.xforce.ibmcloud.com/vulnerabilities/27153 http://pridels0.blogspot.com/2006/06/virtual-war-multiple-sql-inj-vuln.html http://secunia.com/advisories/20696	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-1636`	vulnerable	2026-06-08 04:48:57.677465	Details available PHP remote file inclusion vulnerability in get_header.php in VWar 1.5.0 R12 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the vwar_root parameter. NOTE: this is a different vulnerability than CVE-2006-1503. Published: 2006-04-06T10:00:00.000Z Updated: 2024-08-07T17:19:48.675Z Open on db.gcve.eu Reference links http://downloads.securityfocus.com/vulnerabilities/exploits/VWar_1.5.0_R12.pl http://www.osvdb.org/24480 http://www.vupen.com/english/advisories/2006/1228 http://www.securityfocus.com/archive/1/429742/100/0/threaded http://secunia.com/advisories/19524	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-1503`	vulnerable	2026-06-08 04:48:57.327320	Details available PHP remote file inclusion vulnerability in includes/functions_install.php in Virtual War (VWar) 1.5.0 R11 and earlier allows remote attackers to include and execute arbitrary PHP code via a URL in the vwar_root parameter. NOTE: this is a different vulnerability than CVE-2006-1636. Published: 2006-03-30T01:00:00.000Z Updated: 2024-08-07T17:12:22.076Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/25497 http://www.securityfocus.com/bid/17290 http://www.securityfocus.com/archive/1/429090/100/0/threaded http://secunia.com/advisories/19438 http://www.vupen.com/english/advisories/2006/1144	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Virtual War

Notes

PURL mappings

Vulnerability references

Contribute