Oneorzero
13 CVEs across 4 Oneorzero products. Browse Oneorzero vulnerabilities, severities, and proof-of-concept exploits.
Oneorzero products with known CVEs
Oneorzero CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2012-0989 | | | 2012-10-01 | Cross-site scripting (XSS) vulnerability in OneOrZero AIMS 2.8.0 Trial Edition build231211 and possibly earlier allows remote attackers to inject arbitrary web… |
CVE-2011-4215 | | | 2011-11-01 | SQL injection vulnerability in lib/ooz_access.php in OneOrZero Action & Information Management System (AIMS) 2.7.0 allows remote attackers to execute arbitrary… |
CVE-2011-4214 | | | 2011-11-01 | OneOrZero Action & Information Management System (AIMS) 2.7.0 allows remote attackers to bypass authentication and obtain administrator privileges via a crafte… |
CVE-2010-4835 | | | 2011-09-14 | Directory traversal vulnerability in index.php in OneOrZero AIMS 2.6.0 Members Edition allows remote authenticated users to read arbitrary files via directory… |
CVE-2010-4834 | | | 2011-09-14 | Multiple SQL injection vulnerabilities in index.php in OneOrZero AIMS 2.6.0 Members Edition and 2.7.0 Trial Edition allow remote authenticated users to execute… |
CVE-2009-0886 | | | 2009-03-12 | Directory traversal vulnerability in login.php in OneOrZero Helpdesk 1.6.5.7 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in… |
CVE-2007-5727 | | | 2007-10-30 | Incomplete blacklist vulnerability in the stripScripts function in common.php in OneOrZero Helpdesk 1.6.5.4, 1.6.4.2, and possibly other versions, allows remot… |
CVE-2006-5474 | | | 2006-10-24 | The "forgot password" function in OneOrZero Helpdesk before 1.6.5.4 generates insecure passwords by concatenating the current timestamp with the username, whic… |
CVE-2006-4351 | | | 2006-08-24 | Cross-site scripting (XSS) vulnerability in index.php in OneOrZero 1.6.4.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter. |
CVE-2006-4350 | | | 2006-08-24 | SQL injection vulnerability in index.php in OneOrZero 1.6.4.1 allows remote attackers to execute arbitrary SQL commands via the id parameter. |
CVE-2006-1501 | | | 2006-03-30 | SQL injection vulnerability in index.php in OneOrZero 1.6.3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter, possibly in the k… |
CVE-2003-0304 | | | 2003-06-09 | one||zero (aka One or Zero) Helpdesk 1.4 rc4 allows remote attackers to create administrator accounts by directly calling the install.php Helpdesk Installation… |
CVE-2003-0303 | | | 2003-06-09 | SQL injection vulnerability in one||zero (aka One or Zero) Helpdesk 1.4 rc4 allows remote attackers to modify arbitrary ticket number descriptions via the sg p… |