CVE-2009-0700

Plunet BusinessManager 4.1 and earlier allows remote authenticated users to bypass access restrictions and 1 read sensitive Customer or Order data via a modified Pfad parameter to pagesUTF8/SysDirAnzeige.jsp, or 2 list sensitive Jobs via a direct request to pagesUTF8/auftragjob.jsp...

CVE-2009-0700

CVE-2009-0700 affects Plunet BusinessManager 4.1 and earlier. Remote authenticated users can bypass access restrictions to read sensitive Customer or Order data via a modified Pfad parameter to pagesUTF8/Sys_DirAnzeige.jsp, or enumerate sensitive Jobs via a direct request to pagesUTF8/auftrag_job...

CVE-2009-0700

creationtimestamp| type| source ---|---|--- 2009-01-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32709 2009-01-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32710...