Summary
OneOrZero AIMS is prone to a security-bypass vulnerability and an SQL- injection vulnerability.
An attacker can exploit these issues to bypass certain security restrictions, perform unauthorized actions, bypass filtering, and modify the logic of SQL queries.
OneOrZero AIMS 2.7.0 is affected
other versions may also be affected.
References
Severity
Classification
-
CVE CVE-2011-4215 -
CVSS Base Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related Vulnerabilities