CVE-2008-1725

The IBizEBank.FIProfile.1 ActiveX control in fiprofile20.ocx in IBiz E-Banking Integrator formerly IBiz OFX Integrator 2.0.2932 exposes the unsafe WriteOFXDataFile method, which allows remote attackers to overwrite arbitrary files via a full pathname in the argument. NOTE: some of these details a...

CVE-2008-1725: Undefined Security Weakness

The IBizEBank.FIProfile.1 ActiveX control in fiprofile20.ocx in IBiz E-Banking Integrator formerly IBiz OFX Integrator 2.0.2932 exposes the unsafe WriteOFXDataFile method, which allows remote attackers to overwrite arbitrary files via a full pathname in the argument. NOTE: some of these details a...

ibiz-insecure.txt

-------------------------------------------------------------------- IBiz E-Banking Integrator V2 ActiveX Edition Insecure Method Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational purpose. Use it at your own risk. Author will be no...

IBiz E-Banking Integrator V2 ActiveX Edition Insecure Method Exploit

No description provided by source. -------------------------------------------------------------------- IBiz E-Banking Integrator V2 ActiveX Edition Insecure Method Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational purpose. Use it ...

IBiz E-Banking Integrator 2.0 - ActiveX Edition Insecure Method

IBiz E-Banking Integrator 2.0 - ActiveX Edition Insecure Method -------------------------------------------------------------------- IBiz E-Banking Integrator V2 ActiveX Edition Insecure Method Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for...

IBiz E-Banking Integrator V2 ActiveX Edition Insecure Method Exploit

Exploit for unknown platform in category remote exploits ==================================================================== IBiz E-Banking Integrator V2 ActiveX Edition Insecure Method Exploit ====================================================================...

IBiz E-Banking Integrator 2.0 - ActiveX Edition Insecure Method

-------------------------------------------------------------------- IBiz E-Banking Integrator V2 ActiveX Edition Insecure Method Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational purpose. Use it at your own risk. Author will be no...

OdysseySuite™ Internet Banking vuln.

OdysseySuite™ Internet Banking vuln. Vuln. discovered by : r0t Date: 1 October 2007 Vendor:http://www.megasol.se/odysseysuite.asp affected versions:current orginal advisory: http://pridels-team.blogspot.com/2007/10/odysseysuite-internet-banking-vuln.html OdysseySuite™ contains a flaw that allows ...

CVE-2007-3175

Multiple SQL injection vulnerabilities in W2B Online Banking allow remote attackers to execute arbitrary SQL commands via 1 the draft parameter to mailer.w2b or 2 the listDocPay parameter to DocPay.w2b...

Cross site scripting

Cross-site scripting XSS vulnerability in auth.w2b in W2B Online Banking allows remote attackers to inject arbitrary web script or HTML via the adtype parameter, a different vector than CVE-2006-1980...

CVE-2007-3174

Cross-site scripting XSS vulnerability in auth.w2b in W2B Online Banking allows remote attackers to inject arbitrary web script or HTML via the adtype parameter, a different vector than CVE-2006-1980...

Sql injection

Multiple SQL injection vulnerabilities in W2B Online Banking allow remote attackers to execute arbitrary SQL commands via 1 the draft parameter to mailer.w2b or 2 the listDocPay parameter to DocPay.w2b...

CVE-2007-3174

Cross-site scripting XSS vulnerability in auth.w2b in W2B Online Banking allows remote attackers to inject arbitrary web script or HTML via the adtype parameter, a different vector than CVE-2006-1980...

CVE-2007-3175

Multiple SQL injection vulnerabilities in W2B Online Banking allow remote attackers to execute arbitrary SQL commands via 1 the draft parameter to mailer.w2b or 2 the listDocPay parameter to DocPay.w2b...

CVE-2007-3175

CVE-2007-3175 describes multiple SQL injection vulnerabilities in W2B Online Banking. The affected components are the web applications handling mailer.w2b and DocPay.w2b, where user-supplied input in the draft and listDocPay parameters can be exploited to alter or execute SQL commands remotely. T...

CVE-2007-3174

CVE-2007-3174 is an XSS vulnerability in W2B Online Banking (auth.w2b) exploitable via the adtype parameter (vector distinct from CVE-2006-1980). Public metrics show a CVSS v2 base score of 4.3 (Medium) with Network attack vector, requiring no authentication, no confidentiality impact, but partia...

CVE-2007-3174: Undefined Security Weakness

Cross-site scripting XSS vulnerability in auth.w2b in W2B Online Banking allows remote attackers to inject arbitrary web script or HTML via the adtype parameter, a different vector than CVE-2006-1980...

CVE-2007-3175: Undefined Security Weakness

Multiple SQL injection vulnerabilities in W2B Online Banking allow remote attackers to execute arbitrary SQL commands via 1 the draft parameter to mailer.w2b or 2 the listDocPay parameter to DocPay.w2b...

sparkassen-xss.txt

The "Sparkassen-Finanzgruppe" with a transaction volume of over 3.300 billion euro is one of the largest banks for private customers in germany. Many local member-banks of the group use the online banking portal provided by sfze http://www.sfze.de/, a subsidiary company of Sparkassen-Finanzgruppe...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in TKS Banking Solutions ePortfolio 1.0 Java allow remote attackers to perform unspecified restricted actions in the context of certain accounts by bypassing the client-side protection scheme...