CVEvulnerability
CVE-2011-1668
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-04-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in search.php in AR Web Content Manager (AWCM) 2.1, 2.2, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the search parameter.
Affected configurations
• awcm-cms ar web content manager 2.1
• awcm-cms ar web content manager 2.2
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secpod.org/advisories/SECPOD_AWCM_XSS.txt Exploit
- http://securityreason.com/securityalert/8193 securityreason.com
- http://www.securityfocus.com/archive/1/517294/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/47126 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66536 exchange.xforce.ibmcloud.com
- http://secpod.org/advisories/SECPOD_AWCM_XSS.txt Exploit
- http://securityreason.com/securityalert/8193 securityreason.com
- http://www.securityfocus.com/archive/1/517294/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/47126 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66536 exchange.xforce.ibmcloud.com