CVE-2010-5065

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

popup.php in Virtual War (aka VWar) 1.6.1 R2 allows remote attackers to bypass intended member restrictions and read news posts via a modified newsid parameter in a printnews action.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Weakness enumeration

CWE-264

Affected software

No affected versions have been published.

Timeline

Published
Oct 8, 2012
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2010

CVE-2010-50664.3The createRandomPassword function in includes/functions_common.php in Virtual War (aka VWar) 1.6.1 R2 uses a small range of values to selectCVE-2010-50676.8Virtual War (aka VWar) 1.6.1 R2 uses static session cookies that depend only on a user's password, which makes it easier for remote attackerCVE-2010-50684.3The Cascading Style Sheets (CSS) implementation in Opera 10.5 does not properly handle the :visited pseudo-class, which allows remote attackCVE-2010-50694.3The Cascading Style Sheets (CSS) implementation in Google Chrome 4 does not properly handle the :visited pseudo-class, which allows remote aCVE-2010-50705.0The JavaScript implementation in Apple Safari 4 does not properly restrict the set of values contained in the object returned by the getCompCVE-2010-50715.0The JavaScript implementation in Microsoft Internet Explorer 8.0 and earlier does not properly restrict the set of values contained in the oCVE-2010-50725.0The JavaScript implementation in Opera 10.5 does not properly restrict the set of values contained in the object returned by the getComputedCVE-2010-50735.0The JavaScript implementation in Google Chrome 4 does not properly restrict the set of values contained in the object returned by the getComCVE-2010-50744.3The layout engine in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 executes different code for visited and unCVE-2010-50752.1Integer overflow in aswFW.sys 5.0.594.0 in Avast! Internet Security 5.0 Korean Trial allows local users to cause a denial of service (memoryCVE-2010-50764.3QSslSocket in Qt before 4.7.0-rc1 recognizes a wildcard IP address in the subject's Common Name field of an X.509 certificate, which might aCVE-2010-50777.8server/sv_main.c in Quake3 Arena, as used in ioquake3 before r1762, OpenArena, Tremulous, and other products, allows remote attackers to cau
CVE-2010-5065: Medium severity, CVSS 5.0 | Vulnix