CVE-2007-2312

no score yetEPSS 1.2%

vwar virtual war: no CVSS score yet. EPSS 1.2% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in the Virtual War (VWar) 1.5.0 R15 module for PHP-Nuke allow remote attackers to execute arbitrary SQL commands via the n parameter to extra/online.php and other unspecified scripts in extra/. NOTE: this might be same vulnerability as CVE-2006-4142; however, there is an intervening vendor fix announcement.

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
Published: 2007-04-26
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

vwar:virtual_war

References

http://securityreason.com/securityalert/2642
http://www.attrition.org/pipermail/vim/2007-April/001519.html
http://www.securityfocus.com/archive/1/465612/100/0/threaded
http://www.securityfocus.com/bid/23478
http://www.waraxe.us/advisory-48.html

Check your stack JSON