| Package | Affected versions | Patched versions |
|---|---|---|
| c2box | ≤ 4.0.0 |
B.A.S C2Box before 4.0.0 (r19171) relies on client-side validation, which allows remote attackers to "corrupt the business logic" via a negative value in an overdraft.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free