Unrated severityNVD Advisory· Published Oct 8, 2012· Updated Apr 29, 2026
CVE-2010-5066
CVE-2010-5066
Description
The createRandomPassword function in includes/functions_common.php in Virtual War (aka VWar) 1.6.1 R2 uses a small range of values to select the seed argument for the PHP mt_srand function, which makes it easier for remote attackers to determine randomly generated passwords via a brute-force attack.
Affected products
1- cpe:2.3:a:vwar:virtual_war:1.6.1:r2:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- dmcdonald.net/vwar.txtnvdExploit
- seclists.org/fulldisclosure/2010/Aug/235nvdExploit
News mentions
0No linked articles in our index yet.