CVE-2006-1636

HIGH 7.5CVE-2006-1636 · Published 06/04/2006 · updated 16/06/2026

In short

CVE-2006-1636 is a HIGH (CVSS 7.5) vulnerability affecting virtual war (vwar).
Chance of exploitation in the next 30 days (EPSS): 2.1%, higher than 81.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
virtual war vwar	`= 1.0.0= 1.0.1= 1.0.2= 1.0.3= 1.0.4= 1.0.5= 1.0.6= 1.0.7= 1.0.8= 1.0.9= 1.1.0= 1.1.1= 1.1.2= 1.1.3= 1.1.4= 1.1.5= 1.1.6= 1.1.7= 1.1.8= 1.2.0= 1.2.1= 1.2.2= 1.3= 1.4= 1.5= 1.5.0_r1= 1.5.0_r10= 1.5.0_r11= 1.5.0_r12= 1.5.0_r2= 1.5.0_r3= 1.5.0_r4= 1.5.0_r5= 1.5.0_r6= 1.5.0_r7= 1.5.0_r8= 1.5.0_r9`	No fix yet

Description

PHP remote file inclusion vulnerability in get_header.php in VWar 1.5.0 R12 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the vwar_root parameter. NOTE: this is a different vulnerability than CVE-2006-1503.

References

downloads.securityfocus.com/vulnerabilities/exploits/VWar_1.5.0_R12.pl · Exploit
secunia.com/advisories/19524 · Patch
osvdb.org/24480
securityfocus.com/archive/1/429742/100/0/threaded
securityfocus.com/bid/17358 · Exploit
vupen.com/english/advisories/2006/1228 · Vendor Advisory

More vulnerabilities in virtual war

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

virtual war

vwar

= 1.0.0= 1.0.1= 1.0.2= 1.0.3= 1.0.4= 1.0.5= 1.0.6= 1.0.7= 1.0.8= 1.0.9= 1.1.0= 1.1.1= 1.1.2= 1.1.3= 1.1.4= 1.1.5= 1.1.6= 1.1.7= 1.1.8= 1.2.0= 1.2.1= 1.2.2= 1.3= 1.4= 1.5= 1.5.0_r1= 1.5.0_r10= 1.5.0_r11= 1.5.0_r12= 1.5.0_r2= 1.5.0_r3= 1.5.0_r4= 1.5.0_r5= 1.5.0_r6= 1.5.0_r7= 1.5.0_r8= 1.5.0_r9

No fix yet

More vulnerabilities in virtual war

See all →