CVE-2010-5279

Mô tả

Tham khảo

• dmcdonald.net/vwar.txt · Exploit
• seclists.org/fulldisclosure/2010/Aug/235 · Exploit

Lỗ hổng khác của virtual war

• CVE-2010-5067TRUNG BÌNH 6.8Virtual War (aka VWar) 1.6.1 R2 uses static session cookies that depend only on a user's password, which makes it easier for remote attacker…
• CVE-2010-5066TRUNG BÌNH 4.3The createRandomPassword function in includes/functions_common.php in Virtual War (aka VWar) 1.6.1 R2 uses a small range of values to select…
• CVE-2010-5065TRUNG BÌNH 5.0popup.php in Virtual War (aka VWar) 1.6.1 R2 allows remote attackers to bypass intended member restrictions and read news posts via a modifi…
• CVE-2010-5064TRUNG BÌNH 4.3Multiple cross-site scripting (XSS) vulnerabilities in Virtual War (aka VWar) 1.6.1 R2 allow remote attackers to inject arbitrary web script…
• CVE-2010-5063CAO 7.5SQL injection vulnerability in article.php in Virtual War (aka VWar) 1.6.1 R2 allows remote attackers to execute arbitrary SQL commands via …