high7.5Public exploit code
CVE-2010-4810
Multiple PHP remote file inclusion vulnerabilities in AR Web Content Manager (AWCM) 2.1 final allow remote attackers to execute arbitrary PHP code via a URL in…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- AWCM 2.1 Final - Remote File Inclusion2010-11-13 · webapps · php
Impact
Multiple PHP remote file inclusion vulnerabilities in AR Web Content Manager (AWCM) 2.1 final allow remote attackers to execute arbitrary PHP code via a URL in the theme_file parameter to (1) includes/window_top.php and (2) header.php, and the (3) lang_file parameter to control/common.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Awcm-Cms | Ar Web Content Manager | Version 2.1 |