critical9.0Public exploit code
CVE-2008-1725
The IBizEBank.FIProfile.1 ActiveX control in fiprofile20.ocx in IBiz E-Banking Integrator (formerly IBiz OFX Integrator) 2.0.2932 exposes the unsafe WriteOFXDa…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- IBiz E-Banking Integrator 2.0 - ActiveX Edition Insecure Method2008-04-09 · remote · windows · Verified
Impact
The IBizEBank.FIProfile.1 ActiveX control in fiprofile20.ocx in IBiz E-Banking Integrator (formerly IBiz OFX Integrator) 2.0.2932 exposes the unsafe WriteOFXDataFile method, which allows remote attackers to overwrite arbitrary files via a full pathname in the argument. NOTE: some of these details are obtained from third party information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nsoftware | Ibiz E-Banking Integrator | Version 2.0.2932 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/29758
- http://www.osvdb.org/44393
- http://www.securityfocus.com/bid/28700
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41752
- https://www.exploit-db.com/exploits/5416
- http://secunia.com/advisories/29758
- http://www.osvdb.org/44393
- http://www.securityfocus.com/bid/28700
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41752
- https://www.exploit-db.com/exploits/5416