CVE-2007-4606

PHP remote file inclusion vulnerability in convert/mvcw_conver.php in the Virtual War (VWar) module for PHPNuke-Clan (PNC) 4.2.0 and earlier allows remote…

published August 31, 2007

CVSS
—
EPSS
2%
Percentile
81.8
In the wild
Unconfirmed
What it is

PHP remote file inclusion vulnerability in convert/mvcw_conver.php in the Virtual War (VWar) module for PHPNuke-Clan (PNC) 4.2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the vwar_root parameter, a different vector than CVE-2006-1602. NOTE: it is possible that this issue stems from a problem in VWar itself.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02130 · 81.8th percentile
Published
2007-08-31T00:00Z
EPSS history
Timeline
  • 31 AUG 00:00Z
    PHP remote file inclusion vulnerability in convert/mvcw_conver.php in the Virtual War (VWar) module for PHPNuke-Clan (PNC) 4.2.0 and earlier allows remote…
    cvelistv5