PT-2011-4888

Name of the Vulnerable Software and Affected Versions OneOrZero Action & Information Management System AIMS version 2.7.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the cookieName variable in the lib/ooz access.php file. Recommendations F...