Back
CVE-2005-4748
PHP remote file include vulnerability in functions_admin.php in Virtual War (VWar) 1.5.0 R10 allows remote attackers to include and execute arbitrary PHP code via unspecified attack vectors. NOTE: this issue has been referred to as XSS, but it is clear from the vendor description that it is a file inclusion problem.
Published: Dec 31, 2005
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (3)
| Vendor | Product | Version |
|---|---|---|
| vwar | virtual_war | 1.3 |
| vwar | virtual_war | 1.4 |
| vwar | virtual_war | 1.5.0_r10 |
GitHub Security Advisory GHSA-3q58-fh6p-m7jw
PHP remote file include vulnerability in functions_admin.php in Virtual War (VWar) 1.5.0 R10...
References (4)
Risk Scores
CVSS Score
6.8 / 10
EPSS Score
1.30%
Top 32% most likely to be exploited
Threat Score
27.6 / 100
Data Sources
NVD
EPSS
GitHub