CVE:CVE-2011-4214
CNNVD:CNNVD-201111-002
OneOrZero Action和Informatio Management System (AIMS) 2.7.0版本中存在漏洞。远程攻击者可借助一个特制的oozimsrememberme cookie绕过认证和获取管理者权限。
solution:Upgrade oneorzero aims to a higher version than 2.7.0,and avoid the version 2.7.0