PT-2005-5411 · Vwar · Virtual War

Publicado 2005-12-31 · Atualizado 2008-09-05 · CVE-2005-4748

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Virtual War (VWar) version 1.5.0 R10

Description The issue allows remote attackers to include and execute arbitrary PHP code. It has been mistakenly referred to as a cross-site scripting (XSS) issue, but it is actually a file inclusion problem.

Recommendations For Virtual War (VWar) version 1.5.0 R10, consider restricting access to the functions admin.php file until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Identificadores relacionados

CVE-2005-4748

Produtos afetados

Virtual War

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2005-4748 · Nota de Segurança
• http://securityfocus.com/bid/17315 · Correção
• http://vwar.de · Nota