popup.php in Virtual War (aka VWar) 1.6.1 R2 allows remote attackers to bypass intended member restrictions and read news posts via a modified newsid parameter in a printnews action.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published: 2012-10-08T10:00:00Z
Updated: 2024-09-16T16:57:39.597Z
Reserved: 2011-11-27T00:00:00Z
Link: CVE-2010-5065

No data.

Status : Deferred
Published: 2012-10-08T10:47:44.717
Modified: 2025-04-11T00:51:21.963
Link: CVE-2010-5065

No data.