CVE-2010-4835

CVE-2010-4835 is a directory traversal vulnerability in OneOrZero AIMS 2.6.0 Members Edition. The flaw resides in index.php, where the controller parameter in a show_report action can be manipulated to read arbitrary files. This is a vulnerability in the web application that could allow remote au...