high7.5
CVE-2015-4626
B.A.S C2Box before 4.0.0 (r19171) relies on client-side validation, which allows remote attackers to "corrupt the business logic" via a negative value in an ov…
Impact
B.A.S C2Box before 4.0.0 (r19171) relies on client-side validation, which allows remote attackers to "corrupt the business logic" via a negative value in an overdraft.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Treasuryxpress | C2box | through 4.0.0 |