Oneorzero - vulnerabilities (CVEs)
13 CVEs in 4 products, 0 in the last 30 days, newest from 2012-10-01.
Products
- Oneorzero Helpdesk - 5 CVEs
- Aims - 4 CVEs
- Oneorzero - 3 CVEs
- Action And Information Management System - 1 CVEs
Newest CVEs of Oneorzero
- CVE-2012-0989 - CVSS 4.3 (medium), 2012-10-01: Cross-site scripting (XSS) vulnerability in OneOrZero AIMS 2.8.0 Trial Edition build231211 and possibly earlier allows remote attackers to inject arbitrary…
- CVE-2011-4214 - CVSS 10 (critical), 2011-11-01: OneOrZero Action & Information Management System (AIMS) 2.7.0 allows remote attackers to bypass authentication and obtain administrator privileges via a…
- CVE-2011-4215 - CVSS 7.5 (high), 2011-11-01: SQL injection vulnerability in lib/ooz_access.php in OneOrZero Action & Information Management System (AIMS) 2.7.0 allows remote attackers to execute…
- CVE-2010-4835 - CVSS 4 (medium), 2011-09-14: Directory traversal vulnerability in index.php in OneOrZero AIMS 2.6.0 Members Edition allows remote authenticated users to read arbitrary files via directory…
- CVE-2010-4834 - CVSS 6.5 (medium), 2011-09-14: Multiple SQL injection vulnerabilities in index.php in OneOrZero AIMS 2.6.0 Members Edition and 2.7.0 Trial Edition allow remote authenticated users to…
- CVE-2009-0886 - CVSS 5 (medium), 2009-03-12: Directory traversal vulnerability in login.php in OneOrZero Helpdesk 1.6.5.7 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in…
- CVE-2007-5727 - CVSS 4.3 (medium), 2007-10-30: Incomplete blacklist vulnerability in the stripScripts function in common.php in OneOrZero Helpdesk 1.6.5.4, 1.6.4.2, and possibly other versions, allows…
- CVE-2006-5474 - CVSS 7.5 (high), 2006-10-24: The "forgot password" function in OneOrZero Helpdesk before 1.6.5.4 generates insecure passwords by concatenating the current timestamp with the username,…
- CVE-2006-4350 - CVSS 7.5 (high), 2006-08-24: SQL injection vulnerability in index.php in OneOrZero 1.6.4.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.
- CVE-2006-4351 - CVSS 6.8 (medium), 2006-08-24: Cross-site scripting (XSS) vulnerability in index.php in OneOrZero 1.6.4.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter.
- CVE-2006-1501 - CVSS 7.5 (high), 2006-03-30: SQL injection vulnerability in index.php in OneOrZero 1.6.3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter, possibly in the…
- CVE-2003-0304 - CVSS 10 (critical), 2003-06-09: one||zero (aka One or Zero) Helpdesk 1.4 rc4 allows remote attackers to create administrator accounts by directly calling the install.php Helpdesk…
- CVE-2003-0303 - CVSS 5 (medium), 2003-06-09: SQL injection vulnerability in one||zero (aka One or Zero) Helpdesk 1.4 rc4 allows remote attackers to modify arbitrary ticket number descriptions via the sg…
