CVE-2007-1249

MEDIO 6.8CVE-2007-1249 · Published 03/03/2007 · updated 16/06/2026

In breve

CVE-2007-1249 è una vulnerabilità MEDIO (CVSS 6.8) che riguarda c1 financial services (contelligent).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.1%, superiore al 65.3% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
c1 financial services contelligent	`= 9.1.4`	No fix yet

Description

MoveSortedContentAction in C1 Financial Services Contelligent 9.1.4 does not check "the additional environment security configuration," which allows remote attackers with write permissions to reorder components.

References

osvdb.org/33497
secunia.com/advisories/24364 · Vendor Advisory
contelligent.com/contell/cms/c1web/contelligent/site/contelligent/changelog.html
securityfocus.com/bid/22785
vupen.com/english/advisories/2007/0814
exchange.xforce.ibmcloud.com/vulnerabilities/32775

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free