CVE-2010-4835

CVE-2010-4835 describes a directory traversal vulnerability in OneOrZero AIMS 2.6.0 Members Edition, specifically within the index.php file. This flaw allows remote authenticated users to read arbitrary files by manipulating the "controller" parameter with directory traversal sequences during a "show_report" action. The vulnerability has a CVSS score of 4.0, indicating a medium severity due to its network-based attack vector, low attack complexity, and potential for partial confidentiality impact without affecting integrity or availability. While no active exploitation is noted, exploit code is publicly available via ExploitDB, though there is minimal community discussion or media coverage surrounding this CVE.