AWCM CMS - Local File Inclusion

Software Link: http://www.awcm-cms.com/ Version: 2.x Tested on: Lunix Exploit : ?php print" ------------------------------------------------------------ | Awcm Cms Local File Inclusion Vulnerability | By SwEET-DeViL | x0.rootatgmail.com | example | | Exploit.php ".$argv0." example.com /path/...

AWCM CMS - Local File Inclusion

AWCM CMS - Local File Inclusion Software Link: http://www.awcm-cms.com/ Version: 2.x Tested on: Lunix Exploit : ?php print" ------------------------------------------------------------ | Awcm Cms Local File Inclusion Vulnerability | By SwEET-DeViL | x0.rootatgmail.com | example | | Exploit.php...

AWCM CMS Local File Inclusion Vulnerability

Exploit for php platform in category web applications =========================================== AWCM CMS Local File Inclusion Vulnerability =========================================== Software Link: http://www.awcm-cms.com/ Version: 2.x Tested on: Lunix Exploit : ?php print"...

CVE-2010-1066

AWCM 2.1 stores sensitive data under the web root with insufficient access control, enabling remote attackers to download the database via a direct request to control/db_backup.php. Impact is database disclosure; no exploit details are provided in the connected documents. Remediation not specifie...

CVE-2010-1066

AR Web Content Manager AWCM 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for control/dbbackup.php...

AWCM 2.1 Backup Vulnerability

Subject:AWCM Date: 6/1/21010 Author: alnjm33 version:2.1 Tested on: version:2.1 download: http://awcm.sourceforge.net/ar/downpro.php?id=30 Home:sec-war.com :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::exploit::::::::::::::::::::::::::::::::::::::::::::::::::::::::::...

AWCM - Database Disclosure

AWCM - Database Disclosure Subject:AWCM Date: 6/1/21010 Author: alnjm33 version:2.1 Tested on: version:2.1 download: http://awcm.sourceforge.net/ar/ Home:sec-war.com :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::exploit::::::::::::::::::::::::::::::::::::::::::::::::::::::::::...

AWCM Database Disclosure Vulnerability

Exploit for unknown platform in category web applications ====================================== AWCM Database Disclosure Vulnerability ====================================== Subject:AWCM Date: 6/1/21010 Author: alnjm33 version:2.1 Tested on: version:2.1 download: http://awcm.sourceforge.net/ar/...

AWCM 2.1 Cross Site Scripting

======================================================================================== | Title : AWCM v2.1 Cross Site Scripting Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | Web Site :...

AWCM v2.1 XSS Vulnerability

No description provided by source. ======================================================================================== | Title : AWCM v2.1 Cross Site Scripting Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...

CVE-2009-3219

Directory traversal vulnerability in a.php in AR Web Content Manager AWCM 2.1, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the a parameter...

CVE-2009-3218

SQL injection vulnerability in control/login.php in AR Web Content Manager AWCM 2.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter...

Sql injection

SQL injection vulnerability in control/login.php in AR Web Content Manager AWCM 2.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2009-3219

CVE-2009-3219 affects AR Web Content Manager (AWCM) 2.1. The vulnerability is a directory traversal in a.php where, if magic_quotes_gpc is disabled, an attacker can cause the application to include and execute arbitrary local files by supplying a .. in the a parameter. Impact per the NVD indicate...

CVE-2009-3218

Summary: CVE-2009-3218 describes an SQL injection in AR Web Content Manager (AWCM) 2.1, exploitable when magic_quotes_gpc is disabled, via the username parameter in control/login.php. Affected software: AR Web Content Manager (AWCM) 2.1. The vulnerability originates from improper handling of user...

AWCM 2.1 - Local File Inclusion Authentication Bypass

AWCM 2.1 - Local File Inclusion Authentication Bypass ---------------------------------AWCM v2.1 LFI/Auth Bypass Vulnerabilities--------------------------------------- ---------------------------------------------------------------------------------------------------------------- Script : AWCM...

AWCM 2.1 Local File Inclusion / Auth Bypass Vulnerabilities

Exploit for unknown platform in category web applications =========================================================== AWCM 2.1 Local File Inclusion / Auth Bypass Vulnerabilities ===========================================================...

AWCM 2.1 - Local File Inclusion / Authentication Bypass

---------------------------------AWCM v2.1 LFI/Auth Bypass Vulnerabilities--------------------------------------- ---------------------------------------------------------------------------------------------------------------- Script : AWCM version : v2.1 Language:PHP Demo :...

AWCM 2.1 Local File Inclusion / SQL Injection

---------------------------------AWCM v2.1 LFI/Auth Bypass Vulnerabilities--------------------------------------- ---------------------------------------------------------------------------------------------------------------- Script : AWCM version : v2.1 Language:PHP Demo :...