CVE-2011-1668

Cross-site scripting (XSS) vulnerability in search.php in AR Web Content Manager (AWCM) 2.1, 2.2, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the search parameter.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 86%
VendorProductVersion
awcm-cmsar_web_content_manager
2.1
awcm-cmsar_web_content_manager
2.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secpod.org/advisories/SECPOD_AWCM_XSS.txt
http://securityreason.com/securityalert/8193
http://www.securityfocus.com/archive/1/517294/100/0/threaded
http://www.securityfocus.com/bid/47126
https://exchange.xforce.ibmcloud.com/vulnerabilities/66536
http://secpod.org/advisories/SECPOD_AWCM_XSS.txt
http://securityreason.com/securityalert/8193
http://www.securityfocus.com/archive/1/517294/100/0/threaded
http://www.securityfocus.com/bid/47126
https://exchange.xforce.ibmcloud.com/vulnerabilities/66536