cbcvebase.
CVE-2005-4748
published 2005-12-31

CVE-2005-4748: PHP remote file include vulnerability in functions_admin.php in Virtual War (VWar) 1.5.0 R10 allows remote attackers to include and execute arbitrary PHP code…

PriorityP423medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EPSS
1.30%
66.8th percentile
PHP remote file include vulnerability in functions_admin.php in Virtual War (VWar) 1.5.0 R10 allows remote attackers to include and execute arbitrary PHP code via unspecified attack vectors. NOTE: this issue has been referred to as XSS, but it is clear from the vendor description that it is a file inclusion problem.

Affected

3 ranges
VendorProductVersion rangeFixed in
vwarvirtual_war——
vwarvirtual_war——
vwarvirtual_war——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.