Unrated severityNVD Advisory· Published Nov 26, 2012· Updated Jun 16, 2026

CVE-2012-2437

Description

cookie_gen.php in ar web content manager (AWCM) 2.2 does not require authentication, which allows remote attackers to generate arbitrary cookies via the name parameter in conjunction with the content parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Awcm CMS/AR Web Content Manager
cpe:2.3:a:awcm-cms:ar_web_content_manager:2.2:*:*:*:*:*:*:*
AR/AWCMllm-create
Range: =2.2

Patches

Vulnerability mechanics

References

archives.neohapsis.com/archives/bugtraq/2012-11/0039.htmlnvdExploit
packetstormsecurity.org/files/117975/AWCM-2.2-Access-Bypass.htmlnvd
exchange.xforce.ibmcloud.com/vulnerabilities/79926nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000