The recent exploit provided by aliHackers for VWar (VWar ver 1.21 Remote Code Execution Exploit ) has also another affect on the higher unptached versions of vWAR such as v1.5 and also on versions less than 1.2 . Apart from the successful code execution exploit even if the exploit fails still running the following code on the web browser shows the full path of the installed modules even if the remote php shell is not achieved.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/45819/vwar-path.txt
Source: https://packetstormsecurity.com/files/45819/vwar-path.txt.html