Search Results (22 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2006-3139 1 Vwar 1 Virtual War 2025-04-03 N/A
Multiple SQL injection vulnerabilities in war.php in Virtual War (VWar) 1.5.0 R14 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) s, (2) showgame, (3) sortorder, and (4) sortby parameters.
CVE-2006-2091 1 Vwar 1 Virtual War 2025-04-03 N/A
admin.php in Virtual War (VWar) 1.5 and versions before 1.2 allows remote attackers to obtain sensitive information via an invalid vwar_root parameter, which reveals the path in an error message.