CVE-2006-1503

PHP remote file inclusion vulnerability in includes/functions_install.php in Virtual War (VWar) 1.5.0 R11 and earlier allows remote attackers to include and execute arbitrary PHP code via a URL in the vwar_root parameter. NOTE: this is a different vulnerability than CVE-2006-1636.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:vwar:virtual_war:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:vwar:virtual_war:1.0.2:*:*:*:*:*:*:*
cpe:2.3:a:vwar:virtual_war:1.1.0:*:*:*:*:*:*:*
cpe:2.3:a:vwar:virtual_war:1.1.1:*:*:*:*:*:*:*
cpe:2.3:a:vwar:virtual_war:1.1.8:*:*:*:*:*:*:*
cpe:2.3:a:vwar:virtual_war:1.2.0:*:*:*:*:*:*:*
cpe:2.3:a:vwar:virtual_war:1.0.6:*:*:*:*:*:*:*
cpe:2.3:a:vwar:virtual_war:1.0.7:*:*:*:*:*:*:*
cpe:2.3:a:vwar:virtual_war:1.1.4:*:*:*:*:*:*:*
cpe:2.3:a:vwar:virtual_war:1.1.5:*:*:*:*:*:*:*
cpe:2.3:a:vwar:virtual_war:1.3:*:*:*:*:*:*:*
cpe:2.3:a:vwar:virtual_war:1.0.8:*:*:*:*:*:*:*
cpe:2.3:a:vwar:virtual_war:1.5.0_r7:*:*:*:*:*:*:*
cpe:2.3:a:vwar:virtual_war:1.0.4:*:*:*:*:*:*:*
cpe:2.3:a:vwar:virtual_war:1.5:*:*:*:*:*:*:*
cpe:2.3:a:vwar:virtual_war:1.1.6:*:*:*:*:*:*:*
cpe:2.3:a:vwar:virtual_war:1.2.2:*:*:*:*:*:*:*
cpe:2.3:a:vwar:virtual_war:1.5.0_r6:*:*:*:*:*:*:*
cpe:2.3:a:vwar:virtual_war:1.0.9:*:*:*:*:*:*:*
cpe:2.3:a:vwar:virtual_war:1.5.0_r8:*:*:*:*:*:*:*
cpe:2.3:a:vwar:virtual_war:1.1.3:*:*:*:*:*:*:*
cpe:2.3:a:vwar:virtual_war:1.0.3:*:*:*:*:*:*:*
cpe:2.3:a:vwar:virtual_war:1.2.1:*:*:*:*:*:*:*
cpe:2.3:a:vwar:virtual_war:1.5.0_r3:*:*:*:*:*:*:*
cpe:2.3:a:vwar:virtual_war:1.5.0_r5:*:*:*:*:*:*:*
cpe:2.3:a:vwar:virtual_war:1.5.0_r4:*:*:*:*:*:*:*
cpe:2.3:a:vwar:virtual_war:1.0.5:*:*:*:*:*:*:*
cpe:2.3:a:vwar:virtual_war:1.1.7:*:*:*:*:*:*:*
cpe:2.3:a:vwar:virtual_war:1.4:*:*:*:*:*:*:*
cpe:2.3:a:vwar:virtual_war:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:vwar:virtual_war:1.5.0_r1:*:*:*:*:*:*:*
cpe:2.3:a:vwar:virtual_war:1.5.0_r10:*:*:*:*:*:*:*
cpe:2.3:a:vwar:virtual_war:1.1.2:*:*:*:*:*:*:*
cpe:2.3:a:vwar:virtual_war:1.5.0_r9:*:*:*:*:*:*:*
cpe:2.3:a:vwar:virtual_war:1.5.0_r11:*:*:*:*:*:*:*
cpe:2.3:a:vwar:virtual_war:1.5.0_r2:*:*:*:*:*:*:*

Information

Published : 2006-03-29 17:06

Updated : 2018-10-18 09:32


NVD link : CVE-2006-1503

Mitre link : CVE-2006-1503


JSON object : View

CWE
CWE-94

Improper Control of Generation of Code ('Code Injection')

Advertisement

dedicated server usa

Products Affected

vwar

  • virtual_war