Unrated severityNVD Advisory· Published Feb 23, 2009· Updated Jun 16, 2026
CVE-2009-0700
CVE-2009-0700
Description
Plunet BusinessManager 4.1 and earlier allows remote authenticated users to bypass access restrictions and (1) read sensitive Customer or Order data via a modified Pfad parameter to pagesUTF8/Sys_DirAnzeige.jsp, or (2) list sensitive Jobs via a direct request to pagesUTF8/auftrag_job.jsp.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <=4.1
Patches
Vulnerability mechanics
References
5News mentions
0No linked articles in our index yet.