Unscored CVE-2006-4141 EUVD-2006-4131GHSA-mhrf-ccwq-84jf

SQL injection vulnerability in news.php in Virtual War (VWar) 1.5.0 and earlier allows remote attackers to execute arbitrary SQL commands v…

Published Aug 14, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in news.php in Virtual War (VWar) 1.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) sortby and (2) sortorder parameters.

References

1383 third-party-advisory
virtualwar-news-sql-injection(28332) vdb-entry
20060809 Virtual War v1.5.0 <= Sql Injection vuln. mailing-list