CVE-2006-1503

Published: Mar 30, 2006Modified: Apr 16, 2026

5.1

Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability: 4.9 / Impact: 6.4

Source: NVD

Description

PHP remote file inclusion vulnerability in includes/functions_install.php in Virtual War (VWar) 1.5.0 R11 and earlier allows remote attackers to include and execute arbitrary PHP code via a URL in the vwar_root parameter. NOTE: this is a different vulnerability than CVE-2006-1636.

Affected (36)

Products: Vwar: Virtual War

Vwar

1 product

Virtual War

Configuration A

36 vulnerable

Vulnerable Software	Affected Versions
Vwar Virtual War	Version 1.0.0
Vwar Virtual War	Version 1.0.1
Vwar Virtual War	Version 1.0.2
Vwar Virtual War	Version 1.0.3
Vwar Virtual War	Version 1.0.4
Vwar Virtual War	Version 1.0.5
Vwar Virtual War	Version 1.0.6
Vwar Virtual War	Version 1.0.7
Vwar Virtual War	Version 1.0.8
Vwar Virtual War	Version 1.0.9
Vwar Virtual War	Version 1.1.0
Vwar Virtual War	Version 1.1.1
Vwar Virtual War	Version 1.1.2
Vwar Virtual War	Version 1.1.3
Vwar Virtual War	Version 1.1.4
Vwar Virtual War	Version 1.1.5
Vwar Virtual War	Version 1.1.6
Vwar Virtual War	Version 1.1.7
Vwar Virtual War	Version 1.1.8
Vwar Virtual War	Version 1.2.0
Vwar Virtual War	Version 1.2.1
Vwar Virtual War	Version 1.2.2
Vwar Virtual War	Version 1.3
Vwar Virtual War	Version 1.4
Vwar Virtual War	Version 1.5.0_r10
Vwar Virtual War	Version 1.5.0_r11
Vwar Virtual War	Version 1.5.0_r1
Vwar Virtual War	Version 1.5.0_r2
Vwar Virtual War	Version 1.5.0_r3
Vwar Virtual War	Version 1.5.0_r4
Vwar Virtual War	Version 1.5.0_r5
Vwar Virtual War	Version 1.5.0_r6
Vwar Virtual War	Version 1.5.0_r7
Vwar Virtual War	Version 1.5.0_r8
Vwar Virtual War	Version 1.5.0_r9
Vwar Virtual War	Version 1.5