Summary
OneOrZero AIMS is prone to a security-bypass vulnerability and an SQL- injection vulnerability.
An attacker can exploit these issues to bypass certain security restrictions, perform unauthorized actions, bypass filtering, and modify the logic of SQL queries.
OneOrZero AIMS 2.7.0 is affected
other versions may also be affected.
References
Severity
Classification
-
CVE CVE-2011-4215 -
CVSS Base Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related Vulnerabilities
- Ad Manager Pro Multiple SQL Injection And XSS Vulnerabilities
- Adobe ColdFusion Multiple Vulnerabilities-01 May-2014
- ArticleSetup Multiple Cross-Site Scripting and SQL Injection Vulnerabilities
- A-Blog 'sources/search.php' SQL Injection Vulnerability
- AproxEngine Multiple Remote Input Validation Vulnerabilities