Unrated severityNVD Advisory· Published Oct 8, 2012· Updated Jun 16, 2026
CVE-2010-5066
CVE-2010-5066
Description
The createRandomPassword function in includes/functions_common.php in Virtual War (aka VWar) 1.6.1 R2 uses a small range of values to select the seed argument for the PHP mt_srand function, which makes it easier for remote attackers to determine randomly generated passwords via a brute-force attack.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- cpe:2.3:a:vwar:virtual_war:1.6.1:r2:*:*:*:*:*:*
- Range: = 1.6.1 R2
Patches
Vulnerability mechanics
References
2- dmcdonald.net/vwar.txtnvdExploit
- seclists.org/fulldisclosure/2010/Aug/235nvdExploit
News mentions
0No linked articles in our index yet.