CVE-2012-2437
AWCM 2.2 - XSS
Title source: llmDescription
cookie_gen.php in ar web content manager (AWCM) 2.2 does not require authentication, which allows remote attackers to generate arbitrary cookies via the name parameter in conjunction with the content parameter.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Sooel Son · textwebappsphp
https://www.exploit-db.com/exploits/38015
Scores
EPSS
0.0725
EPSS Percentile
91.5%
Classification
CWE
CWE-287
Status
draft
Affected Products (1)
awcm-cms/ar_web_content_manager
Timeline
Published
Nov 26, 2012
Tracked Since
Feb 18, 2026