CVE-2006-1636

Published: Apr 6, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

PHP remote file inclusion vulnerability in get_header.php in VWar 1.5.0 R12 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the vwar_root parameter. NOTE: this is a different vulnerability than CVE-2006-1503.

Affected (37)

Products: Vwar: Virtual War

Vwar

1 product

Virtual War

Configuration A

37 vulnerable

Vulnerable Software	Affected Versions
Vwar Virtual War	Version 1.0.0
Vwar Virtual War	Version 1.0.1
Vwar Virtual War	Version 1.0.2
Vwar Virtual War	Version 1.0.3
Vwar Virtual War	Version 1.0.4
Vwar Virtual War	Version 1.0.5
Vwar Virtual War	Version 1.0.6
Vwar Virtual War	Version 1.0.7
Vwar Virtual War	Version 1.0.8
Vwar Virtual War	Version 1.0.9
Vwar Virtual War	Version 1.1.0
Vwar Virtual War	Version 1.1.1
Vwar Virtual War	Version 1.1.2
Vwar Virtual War	Version 1.1.3
Vwar Virtual War	Version 1.1.4
Vwar Virtual War	Version 1.1.5
Vwar Virtual War	Version 1.1.6
Vwar Virtual War	Version 1.1.7
Vwar Virtual War	Version 1.1.8
Vwar Virtual War	Version 1.2.0
Vwar Virtual War	Version 1.2.1
Vwar Virtual War	Version 1.2.2
Vwar Virtual War	Version 1.3
Vwar Virtual War	Version 1.4
Vwar Virtual War	Version 1.5.0_r10
Vwar Virtual War	Version 1.5.0_r11
Vwar Virtual War	Version 1.5.0_r12
Vwar Virtual War	Version 1.5.0_r1
Vwar Virtual War	Version 1.5.0_r2
Vwar Virtual War	Version 1.5.0_r3
Vwar Virtual War	Version 1.5.0_r4
Vwar Virtual War	Version 1.5.0_r5
Vwar Virtual War	Version 1.5.0_r6
Vwar Virtual War	Version 1.5.0_r7
Vwar Virtual War	Version 1.5.0_r8
Vwar Virtual War	Version 1.5.0_r9
Vwar Virtual War	Version 1.5