Sploitus

15 exploited vulnerabilities in Virtual War

Vulnerabilities with publicly known exploits

Vendors
Unknown, Vwar
With known exploits
15
Affected Vwar Virtual War versions
= 1.6.1, 1.5, 1.5.0_r15, 1.5.0, 1.5.0_r1, 1.5.0_r2, 1.5.0_r3, 1.5.0_r4, 1.5.0_r5, 1.5.0_r6, 1.5.0_r7, 1.5.0_r8, 1.5.0_r9, 1.5.0_r10, 1.5.0_r11, 1.5.0_r12, 1.5.0_r13, 1.5.0_r14

Vulnerabilities with exploits

Highest CVSS first — 8 of these already have exploit code on Sploitus

CVE-2010-5063 1 exploit
CVSS 7.5 HIGH 2012-10-08
VWar 1.6.1 R2 - Multiple Remote Vulnerabilities
CVE-2008-0753 1 exploit
CVSS 7.5 HIGH 2008-02-13FIX AVAILABLE
VWar 1.5 - 'calendar.php' SQL Injection
CVE-2007-4605 1 exploit
CVSS 7.5 HIGH 2007-08-31FIX AVAILABLE
VWar 1.5.0 R15 - 'mvcw.php' Remote File Inclusion
CVE-2007-2312 1 exploit
CVSS 7.5 HIGH 2007-04-26
VWar 1.50 R14 - 'online.php' SQL Injection
CVE-2006-4142 1 exploit
CVSS 7.5 HIGH 2006-08-14
VWar 1.50 R14 - 'online.php' SQL Injection
CVE-2006-4010 1 exploit
CVSS 7.5 HIGH 2006-08-07
VWar 1.x - 'war.php' Multiple SQL Injections
CVE-2006-1747 7 exploits
CVSS 7.5 HIGH 2006-04-12FIX AVAILABLE
VWar 1.5 - 'joinus.php?vwar_root' Remote File InclusionVWar 1.5 - 'war.php?vwar_root' Remote File Inclusion
CVE-2010-5067
CVSS 6.8 MEDIUM 2012-10-08FIX AVAILABLE
CVE-2006-1503
CVSS 5.1 MEDIUM 2006-03-30
CVE-2010-5279
CVSS 5.0 MEDIUM 2012-10-08FIX AVAILABLE
CVE-2010-5065
CVSS 5.0 MEDIUM 2012-10-08
CVE-2010-5066
CVSS 4.3 MEDIUM 2012-10-08FIX AVAILABLE
CVE-2010-5064
CVSS 4.3 MEDIUM 2012-10-08FIX AVAILABLE
CVE-2007-2306
CVSS 4.3 MEDIUM 2007-04-26FIX AVAILABLE
CVE-2006-4009 1 exploit
CVSS 4.3 MEDIUM 2006-08-07
VWar 1.x - 'war.php?page' Cross-Site Scripting