AR Web Content Manager (AWCM) Cross-Site scripting Vulnerability

SecPod Research Team member (Antu Sanadi) has found an XSS flaw in AR Web Content Manager (AWCM), which can be used to obtain sensitive information and launch further attacks. The flaw lies in the ‘search’ parameter in ‘search.php‘ while the application processes the user-supplied input and renders ...

Mar 30, 2011By Veerendra GG1 min read

SecPod Research Team member (Antu Sanadi) has found an XSS flaw in AR Web Content Manager (AWCM), which can be used to obtain sensitive information and launch further attacks. The flaw lies in the ‘search’ parameter in ‘search.php‘ while the application processes the user-supplied input and renders the content back to the client’s browser. The flaw can be exploited to inject arbitrary HTML code and steal cookies and so on.

The solution can be found at, here

More information can be found here.

CVE Info: CVE-2011-1668

Welcome any feedback or suggestion.

Cheers!
SecPod Research Team

Search across all Learn content

AR Web Content Manager (AWCM) Cross-Site scripting Vulnerability

Featured Posts

Cisco FMC Zero-Day Under Active Attack: UAT-12197, UAT-11823 and Qilin-Linked UAT-11988 Exploit Firewall Flaws

CVE-2026-87491: Google Patches Seventh Actively Exploited Chrome Zero-Day of 2026

Microsoft's September 2026 Patch Tuesday: 973 Vulnerabilities, Two Exploited Zero-Days and a Record Security Release

MikroTik RouterOS Under Attack: Critical SSH Vulnerabilities Enable Router Takeover

Customers

Learn

Support