CVE-2010-4835 EXPLOIT
4.0
MEDIUM · CVSS 2.0 · EPSS 2.3% (pctl 83)
Patch early
A public exploit exists.
Description
Directory traversal vulnerability in index.php in OneOrZero AIMS 2.6.0 Members Edition allows remote authenticated users to read arbitrary files via directory traversal sequences in the controller parameter in a show_report action.
Scoring
| CVSS | 4.0 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:S/C:P/I:N/A:N |
| EPSS | 2.34% — more likely to be exploited than 83% of all CVEs |
| Weakness | CWE-22 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2011-09-14 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| oneorzero | aims |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | OneOrZero AIms 2.6.0 Members Edition - Multiple Vulnerabilities | 2010-11-13 |
References
- http://packetstormsecurity.org/files/view/95814/oneorzeroaims-lfisql.txt
- http://securityreason.com/securityalert/8375
- http://www.exploit-db.com/exploits/15519
- http://www.xenuser.org/documents/security/OneOrZero_Aims_multiple_vulnerabilities.txt
- http://packetstormsecurity.org/files/view/95814/oneorzeroaims-lfisql.txt
- http://securityreason.com/securityalert/8375
- http://www.exploit-db.com/exploits/15519
- http://www.xenuser.org/documents/security/OneOrZero_Aims_multiple_vulnerabilities.txt
→ the Explorer · watch your stack · NVD