CVE

Id
38134  
CVE No.
CVE-2009-0699  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in pagesUTF8/auftrag_allgemeinauftrag.jsp in Plunet BusinessManager 4.1 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the (1) QUB and (2) Bez74 parameters.  
Phase
Assigned (20090223)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
414873 38134 CVE-2009-0699 BUGTRAQ:20090107 Plunet BusinessManager failure in access controls and multiple stored cross site scripting  View
414874 38134 CVE-2009-0699 URL:http://archives.neohapsis.com/archives/bugtraq/2009-01/0032.html  View
414875 38134 CVE-2009-0699 BUGTRAQ:20090109 Re: Plunet BusinessManager failure in access controls and multiple stored cross site scripting  View
414876 38134 CVE-2009-0699 URL:http://archives.neohapsis.com/archives/bugtraq/2009-01/0054.html  View
414877 38134 CVE-2009-0699 MISC:http://www.securenetwork.it/ricerca/advisory/download/SN-2008-04.txt  View
414878 38134 CVE-2009-0699 BID:33153  View
414879 38134 CVE-2009-0699 URL:http://www.securityfocus.com/bid/33153  View
414880 38134 CVE-2009-0699 XF:businessmanager-qub-bez74-xss(47795)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
42255 JVNDB-2009-003262 ASPThai.Net Webboard の bview.asp における SQL インジェクションの脆弱性 ASPThai.Net Webboard の bview.asp には、SQL インジェクションの脆弱性が存在します。 CVE-2009-0703 38134 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003262.html  View