CVE-2010-4835: Oneorzero Aims

Medium severity, CVSS 4.0. EPSS: 2.3% chance of exploitation in the next 30 days.

Directory traversal vulnerability in index.php in OneOrZero AIMS 2.6.0 Members Edition allows remote authenticated users to read arbitrary files via directory traversal sequences in the controller parameter in a show_report action.

Affected products

• Oneorzero Aims: version 2.6.0 only

Published 2011-09-14. Last modified 2026-06-16.