CVE-2006-4141
UnknownEPSS 1.15%
Last modified
CVE-2006-4141 is a vulnerability of currently unknown severity. SQL injection vulnerability in news.php in Virtual War (VWar) 1.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) sortby and (2) sortorder parameters.. EPSS estimates a 1.15% chance of exploitation in the next 30 days.
Description
SQL injection vulnerability in news.php in Virtual War (VWar) 1.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) sortby and (2) sortorder parameters.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Vwar | Virtual War | <= 1.5.0 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2006-4141?
SQL injection vulnerability in news.php in Virtual War (VWar) 1.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) sortby and (2) sortorder parameters.
How severe is CVE-2006-4141?
Severity scoring for CVE-2006-4141 is pending analysis. The EPSS model estimates a 1.15% probability of exploitation in the next 30 days.
How do I fix CVE-2006-4141?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2006
- CVE-2006-4135PHP remote file inclusion vulnerability in cal_config.inc.ph…
- CVE-2006-4136Multiple unspecified vulnerabilities in IBM WebSphere Applic…
- CVE-2006-4137IBM WebSphere Application Server before 6.1.0.1 allows attac…
- CVE-2006-4138Multiple unspecified vulnerabilities in Microsoft Windows He…
- CVE-2006-4139Race condition in Sun Solaris 10 allows attackers to cause a…
- CVE-2006-4140Directory traversal vulnerability in IPCheck Server Monitor …
- CVE-2006-4142SQL injection vulnerability in extra/online.php in Virtual W…
- CVE-2006-4143Netgear FVG318 running firmware 1.0.40 allows remote attacke…
- CVE-2006-4144Integer overflow in the ReadSGIImage function in sgi.c in Im…
- CVE-2006-4145The Universal Disk Format (UDF) filesystem driver in Linux k…
- CVE-2006-4146Buffer overflow in the (1) DWARF (dwarfread.c) and (2) DWARF…
- CVE-2006-4154Format string vulnerability in the mod_tcl module 1.0 for Ap…
Are you affected by CVE-2006-4141?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST