Approved changes feed: RSS · Atom

cpe:2.3:a:awcm-cms:ar_web_content_manager:2.2:*:*:*:*:*:*:*

part: a version: 2.2 update: *

VendorAwcm Cms (4a28b76f-f567-506c-93f1-b89da5da815a)
ProductAr Web Content Manager (9e36a4fc-9176-5f8f-a4be-949168fb1282)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:sourceforge/awcm purl2cpe 2026-06-01 10:12:18.769630

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-2438 vulnerable 2026-06-08 05:02:04.527546 Details available
ar web content manager (AWCM) 2.2 does not restrict the number of comment records that can be submitted through HTTP requests, which allows remote attackers to cause a denial of service (disk consumption) via the coment parameter to (1) show_video.php or (2) topic.php.
Published: 2012-11-26T11:00:00.000Z
Updated: 2024-08-06T19:34:25.728Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2437 vulnerable 2026-06-08 05:02:04.527132 Details available
cookie_gen.php in ar web content manager (AWCM) 2.2 does not require authentication, which allows remote attackers to generate arbitrary cookies via the name parameter in conjunction with the content parameter.
Published: 2012-11-26T11:00:00.000Z
Updated: 2024-08-06T19:34:25.465Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1668 vulnerable 2026-06-08 04:58:01.282264 Details available
Cross-site scripting (XSS) vulnerability in search.php in AR Web Content Manager (AWCM) 2.1, 2.2, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the search parameter.
Published: 2011-04-10T01:00:00.000Z
Updated: 2024-08-06T22:37:25.009Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0903 vulnerable 2026-06-08 04:56:40.129543 Details available
Multiple directory traversal vulnerabilities in AR Web Content Manager (AWCM) 2.2 allow remote attackers to read arbitrary files and possibly have other unspecified impact via a .. (dot dot) in the (1) awcm_theme or (2) awcm_lang cookie to (a) index.php or (b) header.php.
Published: 2011-02-07T20:19:00.000Z
Updated: 2024-08-06T22:05:54.745Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.