CVE-2006-1817

LOW 2.6CVE-2006-1817 · Published 18/04/2006 · updated 16/06/2026

In short

CVE-2006-1817 is a LOW (CVSS 2.6) vulnerability affecting warforge.news (the war forge).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 67.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
warforge.news the_war_forge	`= 1.0`	No fix yet

Description

SQL injection vulnerability in authcheck.php in warforge.NEWS 1.0, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the (1) authusername and possibly the (2) authpassword cookie.

References

evuln.com/vulns/125/summary.html
securityfocus.com/archive/1/432104/100/0/threaded
securityfocus.com/bid/17520
securityfocus.com/bid/17705
vupen.com/english/advisories/2006/1359
exchange.xforce.ibmcloud.com/vulnerabilities/25900

More vulnerabilities in warforge.news

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free