Unrated severityNVD Advisory· Published Aug 14, 2006· Updated Jun 16, 2026

CVE-2006-4141

Description

SQL injection vulnerability in news.php in Virtual War (VWar) 1.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) sortby and (2) sortorder parameters.

Affected products

Vwar/Virtual War
cpe:2.3:a:vwar:virtual_war:*:*:*:*:*:*:*:*
Range: <=1.5.0
Virtual War/VWarllm-fuzzy
Range: <=1.5.0

Patches

Vulnerability mechanics

References

securityreason.com/securityalert/1383nvd
www.securityfocus.com/archive/1/442880/100/0/threadednvd
exchange.xforce.ibmcloud.com/vulnerabilities/28332nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000