CVE-2005-4748 PHP remote file include vulnerability in functions_admin.php in Virtual War (VWar) 1.5.0 R10 allows remote attackers to include and execute arbitrary PHP code via unspecified attack vectors. NOTE: thi...
MediumCVSS 6.8
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP remote file include vulnerability in functions_admin.php in Virtual War (VWar) 1.5.0 R10 allows remote attackers to include and execute arbitrary PHP code via unspecified attack vectors. NOTE: this issue has been referred to as XSS, but it is clear from the vendor description that it is a file inclusion problem.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vwar virtual war | = 1.3 | No fix listed |
| vwar virtual war | = 1.4 | No fix listed |
| vwar virtual war | = 1.5.0_r10 | No fix listed |
References
- 17315 patch vdb-entry
- www.vwar.de