Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The IBizEBank.FIProfile.1 ActiveX control in fiprofile20.ocx in IBiz E-Banking Integrator (formerly IBiz OFX Integrator) 2.0.2932 exposes the unsafe WriteOFXDataFile method, which allows remote attackers to overwrite arbitrary files via a full pathname in the argument. NOTE: some of these details are obtained from third party information.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBiz E-Banking Integrator ActiveX控件WriteOFXDataFile()不安全调用漏洞
Vulnerability Description
IBiz E-Banking Integrator是用于从银行、投资公司等帐号访问财务交易信息的解决方案 。 IBiz E-Banking Integrator所提供的IBizEBank.FIProfile.1 ActiveX控件(fiprofile20.ocx)没有正确地处理对WriteOFXDataFile()方式的调用，如果用户受骗访问了恶意网页的话，就可能导致以当前登录用户的权限覆盖和破坏系统上的任意文件 。
CVSS Information
N/A
Vulnerability Type
N/A