Oneorzero

Records13All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Oneorzero records in CISA KEV

No Oneorzero vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Oneorzero Helpdesk 5 records MEDIUM Aims 4 records MEDIUM Oneorzero 3 records LOW Action And Information Management System 1 record LOW

Records

3 records in Oneorzero · all components

TI-2006-04202 CVE-2006-4350 · GHSA-5rm3-pf82-q5pw

SQL injection vulnerability in index.php in OneOrZero 1.6.4.1 allows remote attackers to…

LOW 35

SQL injection vulnerability in index.php in OneOrZero 1.6.4.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01201 Published 2006-08-24 No fix listed

TI-2006-01454 CVE-2006-1501 · GHSA-g78c-76jc-9gfq

SQL injection vulnerability in index.php in OneOrZero 1.6.3.0 allows remote attackers to…

LOW 35

SQL injection vulnerability in index.php in OneOrZero 1.6.3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter, possibly in the kans action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01251 Published 2006-03-30 No fix listed CWE-89

TI-2006-04203 CVE-2006-4351 · GHSA-m7m4-6jh4-8g8f

Cross-site scripting (XSS) vulnerability in index.php in OneOrZero 1.6.4.1 allows remote…

LOW 32

Cross-site scripting (XSS) vulnerability in index.php in OneOrZero 1.6.4.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01151 Published 2006-08-24 No fix listed

Open these records in search →

Critical	2
High	4
Medium	7
Low	0
No CVSS	0