PT-2012-4043
CVE-2012-2437
·
تاريخ النشر
2012-11-26
·
تاريخ التحديث
2017-08-29
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
ar web content manager (AWCM) version 2.2
Description
The issue allows remote attackers to generate arbitrary cookies without requiring authentication. This can be achieved by manipulating the
name parameter in conjunction with the content parameter in the cookie gen.php file.Recommendations
For version 2.2, consider restricting access to the cookie gen.php file to require authentication before generating cookies, and validate the
name and content parameters to prevent arbitrary cookie generation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾