Filtered by vendor Vwar Subscriptions
Total 22 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2006-4141 1 Vwar 1 Virtual War 2025-04-03 N/A
SQL injection vulnerability in news.php in Virtual War (VWar) 1.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) sortby and (2) sortorder parameters.
CVE-2006-3139 1 Vwar 1 Virtual War 2025-04-03 N/A
Multiple SQL injection vulnerabilities in war.php in Virtual War (VWar) 1.5.0 R14 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) s, (2) showgame, (3) sortorder, and (4) sortby parameters.