SQL injection vulnerability in extra/online.php in Virtual War (VWar) 1.5.0 R14 and earlier allows remote attackers to execute arbitrary SQL commands via the n parameter.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Virtual_war | Vwar | 1.5.0 (including) | 1.5.0 (including) |
| Virtual_war | Vwar | 1.5.0_r1 (including) | 1.5.0_r1 (including) |
| Virtual_war | Vwar | 1.5.0_r2 (including) | 1.5.0_r2 (including) |
| Virtual_war | Vwar | 1.5.0_r3 (including) | 1.5.0_r3 (including) |
| Virtual_war | Vwar | 1.5.0_r4 (including) | 1.5.0_r4 (including) |
| Virtual_war | Vwar | 1.5.0_r5 (including) | 1.5.0_r5 (including) |
| Virtual_war | Vwar | 1.5.0_r6 (including) | 1.5.0_r6 (including) |
| Virtual_war | Vwar | 1.5.0_r7 (including) | 1.5.0_r7 (including) |
| Virtual_war | Vwar | 1.5.0_r8 (including) | 1.5.0_r8 (including) |
| Virtual_war | Vwar | 1.5.0_r9 (including) | 1.5.0_r9 (including) |
| Virtual_war | Vwar | 1.5.0_r10 (including) | 1.5.0_r10 (including) |
| Virtual_war | Vwar | 1.5.0_r11 (including) | 1.5.0_r11 (including) |
| Virtual_war | Vwar | 1.5.0_r12 (including) | 1.5.0_r12 (including) |
| Virtual_war | Vwar | 1.5.0_r13 (including) | 1.5.0_r13 (including) |
| Virtual_war | Vwar | 1.5.0_r14 (including) | 1.5.0_r14 (including) |