CVE-2012-2438 ar web content manager (AWCM) 2.2 does not restrict the number of comment records that can be submitted through HTTP requests, which allows remote attackers to cause a denial of service (disk consumpt...
MediumCVSS 5.0
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ar web content manager (AWCM) 2.2 does not restrict the number of comment records that can be submitted through HTTP requests, which allows remote attackers to cause a denial of service (disk consumption) via the coment parameter to (1) show_video.php or (2) topic.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| awcm-cms ar web content manager | = 2.2 | No fix listed |
References
- 20121108 Vulnerability Report on AWCM 2.2 exploit mailing-list
- packetstormsecurity.org
- awcm-database-sec-bypass(79927) vdb-entry