Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-1725. PoCs published by shinnai.
AI-analyzed exploit summary This exploit targets an insecure method in IBiz E-Banking Integrator V2 ActiveX Edition, allowing arbitrary file creation via the WriteOFXDataFile method. The PoC demonstrates file creation on the local filesystem without authentication.
Description
The IBizEBank.FIProfile.1 ActiveX control in fiprofile20.ocx in IBiz E-Banking Integrator (formerly IBiz OFX Integrator) 2.0.2932 exposes the unsafe WriteOFXDataFile method, which allows remote attackers to overwrite arbitrary files via a full pathname in the argument. NOTE: some of these details are obtained from third party information.
Exploits (1)
This exploit targets an insecure method in IBiz E-Banking Integrator V2 ActiveX Edition, allowing arbitrary file creation via the WriteOFXDataFile method. The PoC demonstrates file creation on the local filesystem without authentication.