CVE-2009-0700

MEDIO 4.0CVE-2009-0700 · Published 23/02/2009 · updated 16/06/2026

In breve

CVE-2009-0700 è una vulnerabilità MEDIO (CVSS 4.0) che riguarda business manager (plunet).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.5%, superiore al 84.8% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
business manager plunet	`≤ 4.1`	No fix yet

Description

Plunet BusinessManager 4.1 and earlier allows remote authenticated users to bypass access restrictions and (1) read sensitive Customer or Order data via a modified Pfad parameter to pagesUTF8/Sys_DirAnzeige.jsp, or (2) list sensitive Jobs via a direct request to pagesUTF8/auftrag_job.jsp.

References

archives.neohapsis.com/archives/bugtraq/2009-01/0032.html · Exploit
archives.neohapsis.com/archives/bugtraq/2009-01/0054.html
securenetwork.it/ricerca/advisory/download/SN-2008-04.txt · Exploit
securityfocus.com/bid/33153 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/47794

Altre vulnerabilità di business manager

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free