CVE

Id
38135  
CVE No.
CVE-2009-0700  
Status
Candidate  
Description
Plunet BusinessManager 4.1 and earlier allows remote authenticated users to bypass access restrictions and (1) read sensitive Customer or Order data via a modified Pfad parameter to pagesUTF8/Sys_DirAnzeige.jsp, or (2) list sensitive Jobs via a direct request to pagesUTF8/auftrag_job.jsp.  
Phase
Assigned (20090223)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
414881 38135 CVE-2009-0700 BUGTRAQ:20090107 Plunet BusinessManager failure in access controls and multiple stored cross site scripting  View
414882 38135 CVE-2009-0700 URL:http://archives.neohapsis.com/archives/bugtraq/2009-01/0032.html  View
414883 38135 CVE-2009-0700 BUGTRAQ:20090109 Re: Plunet BusinessManager failure in access controls and multiple stored cross site scripting  View
414884 38135 CVE-2009-0700 URL:http://archives.neohapsis.com/archives/bugtraq/2009-01/0054.html  View
414885 38135 CVE-2009-0700 MISC:http://www.securenetwork.it/ricerca/advisory/download/SN-2008-04.txt  View
414886 38135 CVE-2009-0700 BID:33153  View
414887 38135 CVE-2009-0700 URL:http://www.securityfocus.com/bid/33153  View
414888 38135 CVE-2009-0700 XF:businessmanager-multiple-security-bypass(47794)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
44831 JVNDB-2009-005838 WSN Guest の search.php における SQL インジェクションの脆弱性 WSN Guest の search.php には、SQL インジェクションの脆弱性が存在します。 CVE-2009-0704 38135 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005838.html  View