Unscored CVE-2006-1503 EUVD-2006-1507GHSA-4vp2-894q-q4q9

PHP remote file inclusion vulnerability in includes/functions_install.php in Virtual War (VWar) 1.5.0 R11 and earlier allows remote attacke…

Published Mar 30, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

PHP remote file inclusion vulnerability in includes/functions_install.php in Virtual War (VWar) 1.5.0 R11 and earlier allows remote attackers to include and execute arbitrary PHP code via a URL in the vwar_root parameter. NOTE: this is a different vulnerability than CVE-2006-1636.

References

virtual-war-functionsinstall-file-include(25497) vdb-entry
17290 vdb-entry
20060328 VWar <= 1.5.0 R11 Remote Code Execution Exploit mailing-list
19438 third-party-advisory
ADV-2006-1144 vdb-entry
24239 vdb-entry
20060403 Vendor ACK for VWar issue - VWar used by PhpNuke Clan mailing-list