Description
B.A.S C2Box before 4.0.0 (r19171) relies on client-side validation, which allows remote attackers to "corrupt the business logic" via a negative value in an overdraft.
Unscored
CVE-2015-4626
EUVD-2015-4645GHSA-qfvx-qh4h-983h
B.A.S C2Box before 4.0.0 (r19171) relies on client-side validation, which allows remote attackers to "corrupt the business logic" via a neg…
Published Jan 23, 2017 · Updated Aug 6, 2024 · Assigned by mitre