CVE-2010-5063

SQL injection vulnerability in article.php in Virtual War (aka VWar) 1.6.1 R2 allows remote attackers to execute arbitrary SQL commands via the ratearticleselect parameter.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2012-10-08

Last modified

2024-09-16

Weaknesses

CWE-89

Affected products

• Virtual War (Vwar)

References

• http://dmcdonald.net/vwar.txt
• http://seclists.org/fulldisclosure/2010/Aug/235
• http://www.securityfocus.com/bid/29001