NVD

Id
60452  
Name
CVE-2006-1747  
Description
PHP remote file inclusion vulnerability in Virtual War (VWar) 1.5.0 allows remote attackers to execute arbitrary PHP code via a URL in the vwar_root parameter to (1) admin/admin.php, (2) war.php, (3) stats.php, (4) news.php, (5) joinus.php, (6) challenge.php, (7) calendar.php, (8) member.php, (9) popup.php, and other unspecified scripts in the admin folder. NOTE: these are different attack vectors than CVE-2006-1636 and CVE-2006-1503.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-04-12  
Modified Date
2016-10-17  
Seq
2006-1747  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
311859 60452 CVE-2006-1747 http://liz0zim.no-ip.org/vwar.txt  View
311860 60452 CVE-2006-1747 20060807 Virtual War v1.5.0 Remote File Include (vwar_root)  View
311861 60452 CVE-2006-1747 1658  View
311862 60452 CVE-2006-1747 http://www.blogcu.com/Liz0ziM/431925/  View
311863 60452 CVE-2006-1747 20060408 Virtual War File İnclusion  View
311864 60452 CVE-2006-1747 17443  View
311865 60452 CVE-2006-1747 19387  View
311866 60452 CVE-2006-1747 virtualwar-member-file-include(28265)  View

Related JVN