AWCM CMS Multiple Remote File Include Vulnerabilities

AWCM CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information or to execute arbitrary script code in the context of the webserver process. This...

AWCM CMS <= 2.2 Multiple RFI Vulnerabilities

AWCM CMS is prone to multiple remote file include RFI vulnerabilities because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

AWCM v2.1 final Remote File Inclusion Vulnerability

Exploit for php platform in category web applications =================================================== AWCM v2.1 final Remote File Inclusion Vulnerability =================================================== +Exploit Title: awcm v2.1 final Remote File Inclusion +Date: 13-11-2010 +Author:...

AWCM 2.1 Final - Remote File Inclusion

AWCM 2.1 Final - Remote File Inclusion +Exploit Title: awcm v2.1 final Remote File Inclusion +Date: 13-11-2010 +Author: LoSt.HaCkEr aDaMTRoJaN +Software Link: www.awcm-cms.com +Version: v2.1 +CVE :I'M IRaQi Hacker town of Musayyib +Contact: LoSt.HaCkEratyahoodotcom 0r LoSt.HaCkEratHaCkEr.ps...

AWCM 2.1 Final - Remote File Inclusion

+Exploit Title: awcm v2.1 final Remote File Inclusion +Date: 13-11-2010 +Author: LoSt.HaCkEr aDaMTRoJaN +Software Link: www.awcm-cms.com +Version: v2.1 +CVE :I'M IRaQi Hacker town of Musayyib +Contact: LoSt.HaCkEratyahoodotcom 0r LoSt.HaCkEratHaCkEr.ps http://sourceforge.net/projects/awcm/files/...

Awcm Cms Local File Inclusion Vulnerability

Author: SwEET-DeViL Published: 10-6-2010 Software Link: http://www.awcm-cms.com/ Download Software: http://sourceforge.net/projects/awcm/ Version: 2.x Tested on: Lunix Exploit : ?php print" ------------------------------------------------------------ | Awcm Cms Local File Inclusion Vulnerability ...

Awcm CMS Local File Inclusion

Exploit Title: Awcm Cms Local File Inclusion Vulnerability Author: SwEET-DeViL Published: 10-6-2010 Software Link: http://www.awcm-cms.com/ Download Software: http://sourceforge.net/projects/awcm/ Version: 2.x Tested on: Lunix Exploit : ?php print"...

AWCM CMS Local File Inclusion Vulnerability

Exploit for php platform in category web applications =========================================== AWCM CMS Local File Inclusion Vulnerability =========================================== Software Link: http://www.awcm-cms.com/ Version: 2.x Tested on: Lunix Exploit : ?php print"...

AWCM CMS - Local File Inclusion

AWCM CMS - Local File Inclusion Software Link: http://www.awcm-cms.com/ Version: 2.x Tested on: Lunix Exploit : ?php print" ------------------------------------------------------------ | Awcm Cms Local File Inclusion Vulnerability | By SwEET-DeViL | x0.rootatgmail.com | example | | Exploit.php...

AWCM CMS - Local File Inclusion

Software Link: http://www.awcm-cms.com/ Version: 2.x Tested on: Lunix Exploit : ?php print" ------------------------------------------------------------ | Awcm Cms Local File Inclusion Vulnerability | By SwEET-DeViL | x0.rootatgmail.com | example | | Exploit.php ".$argv0." example.com /path/...

CVE-2010-1066

AR Web Content Manager AWCM 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for control/dbbackup.php...

CVE-2010-1066

AWCM 2.1 stores sensitive data under the web root with insufficient access control, enabling remote attackers to download the database via a direct request to control/db_backup.php. Impact is database disclosure; no exploit details are provided in the connected documents. Remediation not specifie...

CVE-2010-1066: Undefined Security Weakness

AR Web Content Manager AWCM 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for control/dbbackup.php...

AWCM 2.1 Backup Vulnerability

Subject:AWCM Date: 6/1/21010 Author: alnjm33 version:2.1 Tested on: version:2.1 download: http://awcm.sourceforge.net/ar/downpro.php?id=30 Home:sec-war.com :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::exploit::::::::::::::::::::::::::::::::::::::::::::::::::::::::::...

AWCM Database Disclosure Vulnerability

Exploit for unknown platform in category web applications ====================================== AWCM Database Disclosure Vulnerability ====================================== Subject:AWCM Date: 6/1/21010 Author: alnjm33 version:2.1 Tested on: version:2.1 download: http://awcm.sourceforge.net/ar/...

AWCM - Database Disclosure

AWCM - Database Disclosure Subject:AWCM Date: 6/1/21010 Author: alnjm33 version:2.1 Tested on: version:2.1 download: http://awcm.sourceforge.net/ar/ Home:sec-war.com :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::exploit::::::::::::::::::::::::::::::::::::::::::::::::::::::::::...

AWCM 2.1 Cross Site Scripting

======================================================================================== | Title : AWCM v2.1 Cross Site Scripting Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | Web Site :...

AWCM v2.1 XSS Vulnerability

No description provided by source. ======================================================================================== | Title : AWCM v2.1 Cross Site Scripting Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...

Sql injection

SQL injection vulnerability in control/login.php in AR Web Content Manager AWCM 2.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2009-3219

Directory traversal vulnerability in a.php in AR Web Content Manager AWCM 2.1, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the a parameter...