Search Results (22 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2010-5067 1 Vwar 1 Virtual War 2025-04-11 N/A
Virtual War (aka VWar) 1.6.1 R2 uses static session cookies that depend only on a user's password, which makes it easier for remote attackers to bypass timeout and logout actions, and retain access for a long period of time, by leveraging knowledge of a session cookie.
CVE-2010-5279 1 Vwar 1 Virtual War 2025-04-11 N/A
article.php in Virtual War (aka VWar) 1.6.1 R2 allows remote attackers to cause a denial of service (memory consumption) via a large integer in the ratearticleselect parameter.