Virtual War suffers from a remote file inclusion vulnerability in the vwar_root variable.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/45309/vwar.txt
Source: https://packetstormsecurity.com/files/45309/vwar.txt.html