medium6.8Public exploit code
CVE-2011-0903
Multiple directory traversal vulnerabilities in AR Web Content Manager (AWCM) 2.2 allow remote attackers to read arbitrary files and possibly have other unspec…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- AWCM 2.2 Final - Local File Inclusion2011-01-26 · webapps · php · Verified
Impact
Multiple directory traversal vulnerabilities in AR Web Content Manager (AWCM) 2.2 allow remote attackers to read arbitrary files and possibly have other unspecified impact via a .. (dot dot) in the (1) awcm_theme or (2) awcm_lang cookie to (a) index.php or (b) header.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Awcm-Cms | Ar Web Content Manager | Version 2.2 |