CVE-2010-4810: Awcm-CMS Ar Web Content Manager

High severity, CVSS 7.5. EPSS: 2.3% chance of exploitation in the next 30 days.

Multiple PHP remote file inclusion vulnerabilities in AR Web Content Manager (AWCM) 2.1 final allow remote attackers to execute arbitrary PHP code via a URL in the theme_file parameter to (1) includes/window_top.php and (2) header.php, and the (3) lang_file parameter to control/common.php.

Affected products

• Awcm-CMS Ar Web Content Manager: version 2.1 only

Published 2011-07-08. Last modified 2026-06-16.