Description
PHP remote file inclusion vulnerability in get_header.php in VWar 1.5.0 R12 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the vwar_root parameter. NOTE: this is a different vulnerability than CVE-2006-1503.
References
- http://downloads.securityfocus.com/vulnerabilities/exploits/VWar_1.5.0_R12.pl
- 24480 vdb-entry
- ADV-2006-1228 vdb-entry
- 20060402 VWar <= 1.5.0 R12 Remote File Inclusion Exploit mailing-list
- 19524 third-party-advisory
- 17358 vdb-entry