Security Advisory
CVE-2010-4835
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Directory traversal vulnerability in index.php in OneOrZero AIMS 2.6.0 Members Edition allows remote authenticated users to read arbitrary files via directory traversal sequences in the controller parameter in a show_report action.