Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2011-0903


Vulnerability Score 6.8 6.8
CVE Id CVE-2011-0903
Last Modified 06 Aug 2013 05:27:49
Published 07 Feb 2011 04:00:16
Confidentiality Impact PARTIAL PARTIAL
Integrity Impact PARTIAL PARTIAL
Availability Impact PARTIAL PARTIAL
Access Vector NETWORK
Access Complexity MEDIUM
Authentication NONE



Multiple directory traversal vulnerabilities in AR Web Content Manager (AWCM) 2.2 allow remote attackers to read arbitrary files and possibly have other unspecified impact via a .. (dot dot) in the (1) awcm_theme or (2) awcm_lang cookie to (a) index.php or (b) header.php.

Vulnerable Systems


  • Awcm-cms Ar Web Content Manager 2.2


XF - awcm-theme-file-include(64980)

BID - 46017

EXPLOIT-DB - 16049

Last Updated: 27 May 2016 10:56:06