Lucene search

MitreCVE-2010-4835

HistorySep 14, 2011 - 2:56 a.m.

CVE-2010-4835

2011-09-1402:56:38

CWE-22

mitre

web.nvd.nist.gov

directory traversal

oneorzero aims

aims 2.6.0

members edition

cve-2010-4835

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

AI Score

6.4

Confidence

Low

EPSS

0.012

Percentile

84.9%

JSON

Directory traversal vulnerability in index.php in OneOrZero AIMS 2.6.0 Members Edition allows remote authenticated users to read arbitrary files via directory traversal sequences in the controller parameter in a show_report action.

Affected configurations

Nvd

Node

oneorzeroaimsMatch2.6.0members

VendorProductVersionCPE
oneorzeroaims2.6.0cpe:2.3:a:oneorzero:aims:2.6.0:*:members:*:*:*:*:*

Vendor	Product	Version	CPE
oneorzero	aims	2.6.0	cpe:2.3:a:oneorzero:aims:2.6.0::members:::::

References

packetstormsecurity.org/files/view/95814/oneorzeroaims-lfisql.txt

securityreason.com/securityalert/8375

www.exploit-db.com/exploits/15519

www.xenuser.org/documents/security/OneOrZero_Aims_multiple_vulnerabilities.txt

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

AI Score

6.4

Confidence

Low

EPSS

0.012

Percentile

84.9%

JSON

Related for CVE-2010-4835