CVE-2008-1725 | BDVDB-2026-30167 Detail

Description#

The IBizEBank.FIProfile.1 ActiveX control in fiprofile20.ocx in IBiz E-Banking Integrator (formerly IBiz OFX Integrator) 2.0.2932 exposes the unsafe WriteOFXDataFile method, which allows remote attackers to overwrite arbitrary files via a full pathname in the argument. NOTE: some of these details are obtained from third party information.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/29758
http://www.securityfocus.com/bid/28700
https://exchange.xforce.ibmcloud.com/vulnerabilities/41752
https://www.exploit-db.com/exploits/5416
http://www.osvdb.org/44393

Exploit#

https://www.exploit-db.com/exploits/5416

History#

Version 12008-04-11Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.