The War Forge : Security Vulnerabilities, CVEs, Published In 2006
Multiple cross-site scripting (XSS) vulnerabilities in warforge.NEWS 1.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly including the (1) first_name and (2) last_name parameter in myaccounts.php. NOTE: portions of these details were obtained from third party sources instead of the original disclosure.
Max CVSS
2.6
EPSS Score
0.30%
Published
2006-04-18
Updated
2018-10-18
SQL injection vulnerability in authcheck.php in warforge.NEWS 1.0, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the (1) authusername and possibly the (2) authpassword cookie.
Max CVSS
2.6
EPSS Score
2.17%
Published
2006-04-18
Updated
2018-10-18
2 vulnerabilities found