CVE-2006-3139

Description

Multiple SQL injection vulnerabilities in war.php in Virtual War (VWar) 1.5.0 R14 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) s, (2) showgame, (3) sortorder, and (4) sortby parameters.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/40481

https://exchange.xforce.ibmcloud.com/vulnerabilities/27153

http://www.vupen.com/english/advisories/2006/2383

http://www.securityfocus.com/bid/27772

http://www.securityfocus.com/archive/1/488118/100/200/threaded

http://www.securityfocus.com/archive/1/443171/100/0/threaded

http://www.osvdb.org/26533

http://secunia.com/advisories/20696

http://pridels0.blogspot.com/2006/06/virtual-war-multiple-sql-inj-vuln.html

http://archives.neohapsis.com/archives/bugtraq/2008-02/0186.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS