Vulnerability Details CVE-2005-4748
PHP remote file include vulnerability in functions_admin.php in Virtual War (VWar) 1.5.0 R10 allows remote attackers to include and execute arbitrary PHP code via unspecified attack vectors. NOTE: this issue has been referred to as XSS, but it is clear from the vendor description that it is a file inclusion problem.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 71.9%
CVSS Severity
CVSS v2 Score 6.8
References
Products affected by CVE-2005-4748
-
cpe:2.3:a:vwar:virtual_war:1.3
-
cpe:2.3:a:vwar:virtual_war:1.4
-
cpe:2.3:a:vwar:virtual_war:1.5.0_r10