CVE-2010-4834 - CVE House
Back to Database
Status published Medium CVE-2010-4834

Multiple SQL injection vulnerabilities in index.php in OneOrZero AIMS 2.6.0...

Vulnerability Description

Multiple SQL injection vulnerabilities in index.php in OneOrZero AIMS 2.6.0 Members Edition and 2.7.0 Trial Edition allow remote authenticated users to execute arbitrary SQL commands via the (1) id parameter in a saved_search action and (2) item_types parameter in a show_item_search action in the search_management_manage subcontroller. NOTE: some of these details are obtained from third party information.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2010-4834

Credits & Attribution

No credits recorded in the NVD database.

References

More from oneorzero

View All →
CVE-2012-0989
Cross-site scripting (XSS) vulnerability in OneOrZero AIMS 2.8.0 Trial Edition...
Medium 4.3
CVE-2011-4215
SQL injection vulnerability in lib/ooz_access.php in OneOrZero Action & Information...
High 7.5
CVE-2011-4214
OneOrZero Action & Information Management System (AIMS) 2.7.0 allows remote...
Critical 10
CVE-2010-4835
Directory traversal vulnerability in index.php in OneOrZero AIMS 2.6.0 Members...
Medium 4
CVE-2009-0886
Directory traversal vulnerability in login.php in OneOrZero Helpdesk 1.6.5.7 and...
Medium 5

Affected Vendor

Affected Software

aims
Vulnerable Versions:
2.6.0, 2.7.0

Timeline

Official Publish: September 13th, 2011
Last Modified: August 7th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.