← Database

CVE-2006-4010

HIGH CVSS: 7.5 Published: 2006-08-07 Modified: 2026-06-16

Description

SQL injection vulnerability in war.php in Virtual War (Vwar) 1.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter. NOTE: other vectors are covered by CVE-2006-3139.

Affected Platforms

Vwar Virtual War

Weakness Type

CWE-89

References