CVE-2008-1725
highpriority · attend · 47EPSS 0.029 · 87 %ileexploit · functionalEUUSEPSS · scored 2026-10-27
The IBizEBank.FIProfile.1 ActiveX control in fiprofile20.ocx in IBiz E-Banking Integrator (formerly IBiz OFX Integrator) 2.0.2932 exposes the unsafe WriteOFXDataFile method, which allows remote attackers to overwrite arbitrary files via a full pathname in the argument. NOTE: some of these details are obtained from third party information.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
weaknesses
The CWE weakness classes this flaw belongs to.
exploits (1)
Public proof-of-concept and weaponised exploit code.
- EDB-5416IBiz E-Banking Integrator 2.0 - ActiveX Edition Insecure Methodfunctional · exploit_db
affected products (2)
Products and version ranges known to be affected.
- nsoftware ibiz e-banking integrator= 2.0.2932nvdUScpe:2.3:a:nsoftware:ibiz_e-banking_integrator:*:*:*:*:*:*:*:*
also known as (2)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (10)
External citations — patches, advisories, analysis.
- http://secunia.com/advisories/29758enisa_euvd
- http://www.osvdb.org/44393enisa_euvd
- http://www.securityfocus.com/bid/28700enisa_euvd
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41752enisa_euvd
- https://www.exploit-db.com/exploits/5416enisa_euvd
- http://secunia.com/advisories/29758Vendor Advisorynvd
- http://www.osvdb.org/44393nvd
- http://www.securityfocus.com/bid/28700Exploitnvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan