CVE-2008-1725

CRITICAL 9.0CVE-2008-1725 · Published 11/04/2008 · updated 16/06/2026

In short

CVE-2008-1725 is a CRITICAL (CVSS 9.0) vulnerability affecting ibiz e-banking integrator (nsoftware).
Chance of exploitation in the next 30 days (EPSS): 2.9%, higher than 87.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ibiz e-banking integrator nsoftware	`= 2.0.2932`	No fix yet

Description

The IBizEBank.FIProfile.1 ActiveX control in fiprofile20.ocx in IBiz E-Banking Integrator (formerly IBiz OFX Integrator) 2.0.2932 exposes the unsafe WriteOFXDataFile method, which allows remote attackers to overwrite arbitrary files via a full pathname in the argument. NOTE: some of these details are obtained from third party information.

References

secunia.com/advisories/29758 · Vendor Advisory
osvdb.org/44393
securityfocus.com/bid/28700 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/41752
exploit-db.com/exploits/5416

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free