Back to Database
Status published
Medium
CVE-2010-5065
popup.php in Virtual War (aka VWar) 1.6.1 R2 allows remote...
Vulnerability Description
popup.php in Virtual War (aka VWar) 1.6.1 R2 allows remote attackers to bypass intended member restrictions and read news posts via a modified newsid parameter in a printnews action.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2010-5065
Credits & Attribution
No credits recorded in the NVD database.
More from vwar
View All →CVE-2011-3813
Virtual War (aka VWar) 1.5.0r15 allows remote attackers to obtain...
Medium
5
CVE-2010-5279
article.php in Virtual War (aka VWar) 1.6.1 R2 allows remote...
Medium
5
CVE-2010-5067
Virtual War (aka VWar) 1.6.1 R2 uses static session cookies...
Medium
6.8
CVE-2010-5066
The createRandomPassword function in includes/functions_common.php in Virtual War (aka VWar)...
Medium
4.3
CVE-2010-5064
Multiple cross-site scripting (XSS) vulnerabilities in Virtual War (aka VWar)...
Medium
4.3
Affected Vendor
vwar
View all reports →Affected Software
virtual war
Vulnerable Versions:
1.6.1
Timeline
Official Publish:
October 8th, 2012
Last Modified:
September 16th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.