Vulnerability in Vwar Virtual War
CVE-2005-4748
PHP remote file include vulnerability in functions_admin.php in Virtual War (VWar) 1.5.0 R10 allows remote attackers to include and execute arbitrary PHP code via unspecified attack vectors. NOTE: this issue has been referred to as XSS, but it is clear from the vendor description that it is a file inclusion problem.
EPSS: 0.013 (67.4th percentile) — read the EPSS interpretation.
Affected products
- Vwar Virtual_war — versions 1.3, 1.4, 1.5.0_r10
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (Patch, vdb-entry, x_refsource_BID)