VulnerabilityModified
CVE-2012-2438
ar web content manager (AWCM) 2.2 does not restrict the number of comment records that can be submitted through HTTP requests, which allows remote attackers to cause a denial of service (disk consumption) via the coment parameter to (1) show_video.php…
MEDIUM 5.0EPSS 1.62%
Does this matter?
Lower severity and a low EPSS score (1.62%). Track it; it rarely justifies an emergency change on its own.
Description
ar web content manager (AWCM) 2.2 does not restrict the number of comment records that can be submitted through HTTP requests, which allows remote attackers to cause a denial of service (disk consumption) via the coment parameter to (1) show_video.php or (2) topic.php.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
- EPSS
- 1.62% probability · 75th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-399
- Affected
- awcm-cms/ar web content manager
- Source
- cve@mitre.org
References
- http://archives.neohapsis.com/archives/bugtraq/2012-11/0039.htmlExploit
- http://packetstormsecurity.org/files/117975/AWCM-2.2-Access-Bypass.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79927
- http://archives.neohapsis.com/archives/bugtraq/2012-11/0039.htmlExploit
- http://packetstormsecurity.org/files/117975/AWCM-2.2-Access-Bypass.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79927
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.