İçeriğe atla
Noroxi

oneorzero kayıtları

oneorzero üreticisine ait 13 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
3
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

    Çubuk: toplam · koyu kısım: CISA KEV.

    Tekrar eden sınıflar

    Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

    CWE

    Saldırı profili

    Tüm kayıtlar

    13 kayıt
    • CVE-2003-0304
      42Planlayın

      one||zero (aka One or Zero) Helpdesk 1.4 rc4 allows remote attackers to create administrator accounts by directly calling the install.php He

      KritikCVSS 10,0Kavram kanıtıEPSS %8

      oneorzero · oneorzero helpdesk9 Haz 2003

    • CVE-2011-4214
      41Planlayın

      OneOrZero Action & Information Management System (AIMS) 2.7.0 allows remote attackers to bypass authentication and obtain administrator priv

      KritikCVSS 10,0İstismar yokEPSS %3

      oneorzero · aims1 Kas 2011

    • CVE-2006-5474
      31İzleyin

      The "forgot password" function in OneOrZero Helpdesk before 1.6.5.4 generates insecure passwords by concatenating the current timestamp with

      YüksekCVSS 7,5İstismar yokEPSS %2

      oneorzero · oneorzero helpdesk24 Eki 2006

    • CVE-2011-4215
      30İzleyin

      SQL injection vulnerability in lib/ooz_access.php in OneOrZero Action & Information Management System (AIMS) 2.7.0 allows remote attackers t

      YüksekCVSS 7,5İstismar yokEPSS %1

      oneorzero · aims1 Kas 2011

    • CVE-2006-1501
      30İzleyin

      SQL injection vulnerability in index.php in OneOrZero 1.6.3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter

      YüksekCVSS 7,5Kavram kanıtıEPSS %1

      oneorzero · oneorzero29 Mar 2006

    • CVE-2006-4350
      30İzleyin

      SQL injection vulnerability in index.php in OneOrZero 1.6.4.1 allows remote attackers to execute arbitrary SQL commands via the id parameter

      YüksekCVSS 7,5İstismar yokEPSS %1

      oneorzero · oneorzero24 Ağu 2006

    • CVE-2006-4351
      27İzleyin

      Cross-site scripting (XSS) vulnerability in index.php in OneOrZero 1.6.4.1 allows remote attackers to inject arbitrary web script or HTML vi

      OrtaCVSS 6,8İstismar yokEPSS %1

      oneorzero · oneorzero24 Ağu 2006

    • CVE-2010-4834
      26İzleyin

      Multiple SQL injection vulnerabilities in index.php in OneOrZero AIMS 2.6.0 Members Edition and 2.7.0 Trial Edition allow remote authenticat

      OrtaCVSS 6,5Kavram kanıtıEPSS %1

      oneorzero · aims13 Eyl 2011

    • CVE-2009-0886
      22İzleyin

      Directory traversal vulnerability in login.php in OneOrZero Helpdesk 1.6.5.7 and earlier allows remote attackers to read arbitrary files via

      OrtaCVSS 5,0Kavram kanıtıEPSS %7

      oneorzero · oneorzero helpdesk12 Mar 2009

    • CVE-2003-0303
      21İzleyin

      SQL injection vulnerability in one||zero (aka One or Zero) Helpdesk 1.4 rc4 allows remote attackers to modify arbitrary ticket number descri

      OrtaCVSS 5,0Kavram kanıtıEPSS %3

      oneorzero · oneorzero helpdesk9 Haz 2003

    • CVE-2007-5727
      18İzleyin

      Incomplete blacklist vulnerability in the stripScripts function in common.php in OneOrZero Helpdesk 1.6.5.4, 1.6.4.2, and possibly other ver

      OrtaCVSS 4,3İstismar yokEPSS %2

      oneorzero · oneorzero helpdesk30 Eki 2007

    • CVE-2010-4835
      17İzleyin

      Directory traversal vulnerability in index.php in OneOrZero AIMS 2.6.0 Members Edition allows remote authenticated users to read arbitrary f

      OrtaCVSS 4,0Kavram kanıtıEPSS %2

      oneorzero · aims13 Eyl 2011

    • CVE-2012-0989
      17İzleyin

      Cross-site scripting (XSS) vulnerability in OneOrZero AIMS 2.8.0 Trial Edition build231211 and possibly earlier allows remote attackers to i

      OrtaCVSS 4,3Kavram kanıtıEPSS %2

      oneorzero · action and information management system1 Eki 2012