CVE-2010-4835 | BDVDB-2026-47209 Detail

Description#

Directory traversal vulnerability in index.php in OneOrZero AIMS 2.6.0 Members Edition allows remote authenticated users to read arbitrary files via directory traversal sequences in the controller parameter in a show_report action.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://securityreason.com/securityalert/8375
http://packetstormsecurity.org/files/view/95814/oneorzeroaims-lfisql.txt
http://www.exploit-db.com/exploits/15519
http://www.xenuser.org/documents/security/OneOrZero_Aims_multiple_vulnerabilities.txt

Exploit#

http://www.exploit-db.com/exploits/15519

History#

Version 12011-09-13Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.