CVE-2010-4835

OneOrZero AIMS 2.6.0 - Path Traversal

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2010-4835. PoCs published by Valentin.

AI-analyzed exploit summary This is a vulnerability writeup detailing SQL injection and local file inclusion vulnerabilities in OneOrZero AIMS v2.6.0. It provides example URLs and parameters affected by these vulnerabilities but does not include functional exploit code.

Description

Directory traversal vulnerability in index.php in OneOrZero AIMS 2.6.0 Members Edition allows remote authenticated users to read arbitrary files via directory traversal sequences in the controller parameter in a show_report action.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Valentin · textwebappsphp
https://www.exploit-db.com/exploits/15519

This is a vulnerability writeup detailing SQL injection and local file inclusion vulnerabilities in OneOrZero AIMS v2.6.0. It provides example URLs and parameters affected by these vulnerabilities but does not include functional exploit code.

Classification
Writeup 90%
Attack Type
Sqli | Info Leak
Complexity
Moderate
Reliability
Theoretical
Target: OneOrZero AIMS v2.6.0
Auth required
Prerequisites: Authenticated access to the application
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4
Core References
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/8375
Exploit exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/15519

Scores

EPSS 0.0240
EPSS Percentile 81.8%

Details

CWE
CWE-22
Status published
Products (1)
oneorzero/aims 2.6.0
Published Sep 14, 2011
Tracked Since Feb 18, 2026