Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-4010. PoCs published by mfoxhacker.
AI-analyzed exploit summary The provided text describes multiple input-validation vulnerabilities in Vwar, including SQL injection and XSS. It lists example URLs demonstrating how an attacker could exploit these vulnerabilities but does not include actual exploit code.
Description
SQL injection vulnerability in war.php in Virtual War (Vwar) 1.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter. NOTE: other vectors are covered by CVE-2006-3139.
Exploits (1)
The provided text describes multiple input-validation vulnerabilities in Vwar, including SQL injection and XSS. It lists example URLs demonstrating how an attacker could exploit these vulnerabilities but does not include actual exploit code.