← Database

CVE-2006-1503

MEDIUM CVSS: 5.1 Published: 2006-03-30 Modified: 2026-06-16

Description

PHP remote file inclusion vulnerability in includes/functions_install.php in Virtual War (VWar) 1.5.0 R11 and earlier allows remote attackers to include and execute arbitrary PHP code via a URL in the vwar_root parameter. NOTE: this is a different vulnerability than CVE-2006-1636.

Affected Platforms

Vwar Virtual War

Weakness Type

CWE-94

References