PT-2005-5411 · Vwar · Virtual War

Published 2005-12-31 · Updated 2008-09-05 · CVE-2005-4748

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Virtual War (VWar) version 1.5.0 R10

Description The issue allows remote attackers to include and execute arbitrary PHP code. It has been mistakenly referred to as a cross-site scripting (XSS) issue, but it is actually a file inclusion problem.

Recommendations For Virtual War (VWar) version 1.5.0 R10, consider restricting access to the functions admin.php file until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2005-4748

Affected Products

Virtual War

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2005-4748 · Security Note
• http://securityfocus.com/bid/17315 · Patch
• http://vwar.de · Note