The-ghost Ar Web Content Manager — known CVE vulnerabilities

Every CVE whose affected-product data names The-ghost Ar Web Content Manager, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2009-3218 — CVSS 6.8 (medium): SQL injection vulnerability in control/login.php in AR Web Content Manager (AWCM) 2.1, when magic_quotes_gpc is disabled, allows remote…
• CVE-2009-3219 — CVSS 6.8 (medium): Directory traversal vulnerability in a.php in AR Web Content Manager (AWCM) 2.1, when magic_quotes_gpc is disabled, allows remote attackers…
• CVE-2010-1066 — CVSS 5.0 (medium): AR Web Content Manager (AWCM) 2.1 stores sensitive information under the web root with insufficient access control, which allows remote…