CVE-2011-1668

Description

References

• secpod.org/advisories/SECPOD_AWCM_XSS.txt · Exploit
• securityreason.com/securityalert/8193
• securityfocus.com/archive/1/517294/100/0/threaded
• securityfocus.com/bid/47126 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/66536

More vulnerabilities in ar web content manager

• CVE-2012-2438MEDIUM 5.0ar web content manager (AWCM) 2.2 does not restrict the number of comment records that can be submitted through HTTP requests, which allows …
• CVE-2012-2437MEDIUM 5.0cookie_gen.php in ar web content manager (AWCM) 2.2 does not require authentication, which allows remote attackers to generate arbitrary coo…
• CVE-2010-4810HIGH 7.5Multiple PHP remote file inclusion vulnerabilities in AR Web Content Manager (AWCM) 2.1 final allow remote attackers to execute arbitrary PH…
• CVE-2011-0903MEDIUM 6.8Multiple directory traversal vulnerabilities in AR Web Content Manager (AWCM) 2.2 allow remote attackers to read arbitrary files and possibl…