PT-2011-1770

Name of the Vulnerable Software and Affected Versions OneOrZero AIMS version 2.6.0 Members Edition Description A directory traversal issue exists, allowing remote authenticated users to read arbitrary files. This is achieved through directory traversal sequences in the controller parameter in a...

PT-2011-21: SQL injection vulnerability in OneOrZero AIMS

Positive Research Center has discovered multiply SQL injection vulnerabilities in OneOrZero AIMS. Application incorrectly validates input data. That allows attackers to conduct SQL injection attack. "SQL Injection" is a way to bypass network protection and attack the database. Settings transferre...

PT-2011-20: Authorization bypass vulnerability in OneOrZero AIMS

Positive Research Center has discovered authorization bypass vulnerability in OneOrZero AIMS. Vulnerability exists due incorrect logic of authorization using $COOKIE variables - predictable session value, stored in $COOKIE'oozimsrememberme' variable. Attacker, have valid username which registered...

OneOrZero AIMS 2.6.0 Members Edition Local File Inclusion / SQL Injection

Exploit Title: OneOrZero AIMS v2.6.0 Members Edition Multiple Vulnerabilities Date: 13.11.2010 Author: Valentin Category: webapps/0day Version: 2.6.0 Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Titl...

OneOrZero AIMS v2.6.0 Members Edition Multiple Vulnerabilities

Exploit for php platform in category web applications ============================================================== OneOrZero AIMS v2.6.0 Members Edition Multiple Vulnerabilities ============================================================== :::::::::::::::::::::::::::::::::::::: 0x1...

OneOrZero AIms 2.6.0 Members Edition - Multiple Vulnerabilities

OneOrZero AIms 2.6.0 Members Edition - Multiple Vulnerabilities :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = OneOrZero AIMS v2.6.0 Members Edition Multiple Vulnerabilities Author = Valentin Hoebel Contact =...

OneOrZero AIms 2.6.0 Members Edition - Multiple Vulnerabilities

:::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = OneOrZero AIMS v2.6.0 Members Edition Multiple Vulnerabilities Author = Valentin Hoebel Contact = [email protected] :::::::::::::::::::::::::::::::::::::: 0x2...