CVE-2011-1668 Cross-site scripting (XSS) vulnerability in search.php in AR Web Content Manager (AWCM) 2.1, 2.2, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the sea...
MediumCVSS 4.3
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in search.php in AR Web Content Manager (AWCM) 2.1, 2.2, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the search parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| awcm-cms ar web content manager | = 2.1 | No fix listed |
| awcm-cms ar web content manager | = 2.2 | No fix listed |
References
- secpod.org exploit
- 8193 third-party-advisory
- 20110401 AR Web Content Manager (AWCM) Cross-Site scripting Vulnerability mailing-list
- 47126 exploit vdb-entry
- arwebcontentmanager-search-xss(66536) vdb-entry