← Database

CVE-2007-1249

MEDIUM CVSS: 6.8 Published: 2007-03-03 Modified: 2026-06-16

Description

MoveSortedContentAction in C1 Financial Services Contelligent 9.1.4 does not check "the additional environment security configuration," which allows remote attackers with write permissions to reorder components.

Affected Platforms

Contelligent C1 Financial Services

Weakness Type

CWE-362

References