Read the docs

Oneorzero

Records13All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Oneorzero records in CISA KEV

No Oneorzero vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Oneorzero Helpdesk 5 records MEDIUM Aims 4 records MEDIUM Oneorzero 3 records LOW Action And Information Management System 1 record LOW

Records

4 records in Aims · all components

TI-2010-04557 CVE-2010-4834 · GHSA-mjjq-pvqq-vp28

Multiple SQL injection vulnerabilities in index.php in OneOrZero AIMS 2.6.0 Members…

Priority LOW 31

Multiple SQL injection vulnerabilities in index.php in OneOrZero AIMS 2.6.0 Members Edition and 2.7.0 Trial Edition allow remote authenticated users to execute arbitrary SQL commands via the (1) id parameter in a saved_s…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.00899 Published 2011-09-13 No fix listed CWE-89
TI-2010-04558 CVE-2010-4835 · GHSA-3w7x-45wj-hgjm

Directory traversal vulnerability in index.php in OneOrZero AIMS 2.6.0 Members Edition…

Priority LOW 23

Directory traversal vulnerability in index.php in OneOrZero AIMS 2.6.0 Members Edition allows remote authenticated users to read arbitrary files via directory traversal sequences in the controller parameter in a show_rep…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.02336 Published 2011-09-13 No fix listed CWE-22
Open these records in search →