CVE-2008-1725

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.90%

Published

Apr 11, 2008

Modified

Jun 16, 2026

Public PoC / Exploit (2)

All weaponized →

TrickestTrickest PoC index Exploit-DBIBiz E-Banking Integrator 2.0 - ActiveX Edition Insecure Method

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The IBizEBank.FIProfile.1 ActiveX control in fiprofile20.ocx in IBiz E-Banking Integrator (formerly IBiz OFX Integrator) 2.0.2932 exposes the unsafe WriteOFXDataFile method, which allows remote attackers to overwrite arbitrary files via a full pathname in the argument. NOTE: some of these details are obtained from third party information.

Affected Products (1)

nsoftware · ibiz_e-banking_integratorvulnerable

References (10)

http://secunia.com/advisories/29758

Vendor Advisory

http://www.osvdb.org/44393

http://www.securityfocus.com/bid/28700

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/41752

https://www.exploit-db.com/exploits/5416

http://secunia.com/advisories/29758

Vendor Advisory