CVE-2007-1332 Multiple cross-site request forgery (CSRF) vulnerabilities in TKS Banking Solutions ePortfolio 1.0 Java allow remote attackers to perform unspecified restricted actions in the context of certain accou...
HighCVSS 9.3
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in TKS Banking Solutions ePortfolio 1.0 Java allow remote attackers to perform unspecified restricted actions in the context of certain accounts by bypassing the client-side protection scheme.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tks banking solutions eportfolio | = 1.0 | No fix listed |
References
- 24331 third-party-advisory
- 2385 third-party-advisory
- www.scip.ch
- www.scip.ch vendor-advisory
- 20070305 ePortfolio version 1.0 Java Multiple Input Validation Vulnerabilities mailing-list
- 22829 vdb-entry