CVE-2006-3139: Vwar Virtual War

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in war.php in Virtual War (VWar) 1.5.0 R14 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) s, (2) showgame, (3) sortorder, and (4) sortby parameters.

Affected products

• Vwar Virtual War: up to and including 1.5.0_r14; version 1.5.0_r1 only; version 1.5.0_r2 only; version 1.5.0_r3 only; version 1.5.0_r4 only; version 1.5.0_r5 only; …

Published 2006-06-22. Last modified 2026-06-16.