CVE-2026-2344

A vulnerability in Plunet Plunet BusinessManager allows unauthorized actions being performed on behalf of privileged users.This issue affects Plunet BusinessManager: 10.15.1...

CVE-2026-2344

A vulnerability in Plunet Plunet BusinessManager allows unauthorized actions being performed on behalf of privileged users.This issue affects Plunet BusinessManager: 10.15.1...

CVE-2026-2344

CVE-2026-2344 affects Plunet BusinessManager 10.15.1. The initial description states an unauthorized action can be performed on behalf of privileged users, but no specific vulnerable component or root-cause details are provided. The CVSS 4.0 base metrics indicate a HIGH severity (8.6) with NETWOR...

CVE-2026-2344 Stored XSS on Plunet BusinessManager

A vulnerability in Plunet Plunet BusinessManager allows unauthorized actions being performed on behalf of privileged users.This issue affects Plunet BusinessManager: 10.15.1...

CVE-2026-2344 Stored XSS on Plunet BusinessManager

A vulnerability in Plunet Plunet BusinessManager allows unauthorized actions being performed on behalf of privileged users.This issue affects Plunet BusinessManager: 10.15.1...

CVE-2026-2337 Refleccted XSS on Plunet BusinessManager

A vulnerability in Plunet Plunet BusinessManager allows session hijacking, data theft, unauthorized actions on behalf of the user.This issue affects Plunet BusinessManager: 10.15.1...

CVE-2026-2337 Refleccted XSS on Plunet BusinessManager

A vulnerability in Plunet Plunet BusinessManager allows session hijacking, data theft, unauthorized actions on behalf of the user.This issue affects Plunet BusinessManager: 10.15.1...

CVE-2026-2337

CVE-2026-2337 : A vulnerability in Plunet Plunet BusinessManager (affected version: 10.15.1) allows session hijacking and data theft with unauthorized actions on behalf of the user. The connected documents specify the issue and affected product; no root-cause details, impact scope beyond confiden...

Plunet BusinessManager 安全漏洞

Plunet BusinessManager is a business management system developed by the German company Plunet. Version 10.15.1 of Plunet BusinessManager contains a security vulnerability, which stems from allowing unauthorized operations to be performed with privileged user privileges...

PT-2026-7612

A vulnerability in Plunet Plunet BusinessManager allows unauthorized actions being performed on behalf of privileged users.This issue affects Plunet BusinessManager: 10.15.1...

Plunet BusinessManager 安全漏洞

Plunet BusinessManager is a business management system developed by the German company Plunet. The version 10.15.1 of Plunet BusinessManager contains a security vulnerability. This vulnerability stems from allowing session hijacking and data theft, potentially enabling unauthorized operations und...

EUVD-2009-0699

Malware in sbrugna...

Plunet BusinessManager 4.1 pagesUTF8/auftrag_allgemeinauftrag.jsp Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/33153/info Plunet BusinessManager is prone to multiple security-bypass and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitra...

Plunet BusinessManager 4.1 pagesUTF8/Sys_DirAnzeige.jsp Pfad Parameter Direct Request Information Disclosure

No description provided by source. source: http://www.securityfocus.com/bid/33153/info Plunet BusinessManager is prone to multiple security-bypass and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitra...

Plunet BusinessManager 4.1 pagesUTF8/auftrag_job.jsp Pfad Parameter Direct Request Information Disclosure

No description provided by source. source: http://www.securityfocus.com/bid/33153/info Plunet BusinessManager is prone to multiple security-bypass and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitra...

CVE-2009-0700

Plunet BusinessManager 4.1 and earlier allows remote authenticated users to bypass access restrictions and 1 read sensitive Customer or Order data via a modified Pfad parameter to pagesUTF8/SysDirAnzeige.jsp, or 2 list sensitive Jobs via a direct request to pagesUTF8/auftragjob.jsp...

CVE-2009-0699

Cross-site scripting XSS vulnerability in pagesUTF8/auftragallgemeinauftrag.jsp in Plunet BusinessManager 4.1 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the 1 QUB and 2 Bez74 parameters...

Cross site scripting

Cross-site scripting XSS vulnerability in pagesUTF8/auftragallgemeinauftrag.jsp in Plunet BusinessManager 4.1 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the 1 QUB and 2 Bez74 parameters...

Design/Logic Flaw

Plunet BusinessManager 4.1 and earlier allows remote authenticated users to bypass access restrictions and 1 read sensitive Customer or Order data via a modified Pfad parameter to pagesUTF8/SysDirAnzeige.jsp, or 2 list sensitive Jobs via a direct request to pagesUTF8/auftragjob.jsp...

CVE-2009-0699

CVE-2009-0699 describes a cross-site scripting (XSS) vulnerability in Plunet BusinessManager (pagesUTF8/auftrag_allgemeinauftrag.jsp) affecting version 4.1 and earlier. The issue allows remote authenticated users to inject arbitrary JavaScript or HTML via the QUB and Bez74 parameters. Public sour...