CVE-2007-1332

Multiple cross-site request forgery (CSRF) vulnerabilities in TKS Banking Solutions ePortfolio 1.0 Java allow remote attackers to perform unspecified restricted actions in the context of certain accounts by bypassing the client-side protection scheme.

Link	Resource
http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=2893
http://www.scip.ch/publikationen/advisories/scip_advisory-2893_eportfolio_%201.0_java_multiple_vulnerabilities.txt	Vendor Advisory
http://www.securityfocus.com/bid/22829
http://secunia.com/advisories/24331
http://securityreason.com/securityalert/2385
http://www.securityfocus.com/archive/1/461895/100/0/threaded

Configuration 1

cpe:2.3:a:tks_banking_solutions:eportfolio:1.0:*:*:*:*:*:*:*

---

Published : 2007-03-07 09:19

Updated : 2018-10-16 04:37

---

NVD link : CVE-2007-1332

Mitre link : CVE-2007-1332

No products.

NVD-CWE-Other