CVE Database
/

CVE-2010-4810

Back to search

CVE-2010-4810

Published: Jul 8, 2011

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple PHP remote file inclusion vulnerabilities in AR Web Content Manager (AWCM) 2.1 final allow remote attackers to execute arbitrary PHP code via a URL in the theme_file parameter to (1) includes/window_top.php and (2) header.php, and the (3) lang_file parameter to control/common.php.

VendorProductVersions

n/a

n/a

affected
n/a

References

15510
exploit
x_refsource_EXPLOIT-DB
44868
vdb-entry
x_refsource_BID
awcm-themefile-file-include(63236)
vdb-entry
x_refsource_XF

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now