CVE-2006-4009

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-08-07 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in war.php in Virtual War (Vwar) 1.5.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter.

Affected products

Vwar Virtual War: 1.5.0

References

http://securityreason.com/securityalert/1331
http://www.securityfocus.com/archive/1/442101/100/0/threaded
http://www.securityfocus.com/archive/1/443171/100/0/threaded
http://www.securityfocus.com/bid/19327
https://exchange.xforce.ibmcloud.com/vulnerabilities/28200
http://securityreason.com/securityalert/1331
http://www.securityfocus.com/archive/1/442101/100/0/threaded
http://www.securityfocus.com/archive/1/443171/100/0/threaded
http://www.securityfocus.com/bid/19327
https://exchange.xforce.ibmcloud.com/vulnerabilities/28200

Get alerted when CVE-2006-4009 or the next vulnerability affects your stack