5
CVSSv2

CVE-2010-1066

Published: 23/03/2010 Updated: 17/08/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 505
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

AR Web Content Manager (AWCM) 2.1 stores sensitive information under the web root with insufficient access control, which allows remote malicious users to download a database via a direct request for control/db_backup.php.

Vulnerable Product Search on Vulmon Subscribe to Product

the-ghost ar web content manager 2.1

Exploits

Subject:AWCM Date: 6/1/21010 Author: alnjm33 version:21 Tested on: version:21 download: awcmsourceforgenet/ar/ Home:sec-warcom<sec-warcom> :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::exploit:::::::::::::::::::::::::::::::::::::::::::::::::::::::::: site/path/control/db_backupphp u will download the da ...