← Database

CVE-2006-4141

HIGH CVSS: 7.5 Published: 2006-08-14 Modified: 2026-06-16

Description

SQL injection vulnerability in news.php in Virtual War (VWar) 1.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) sortby and (2) sortorder parameters.

Affected Platforms

Vwar Virtual War

Weakness Type

NVD-CWE-Other

References