← Database

CVE-2009-0699

LOW CVSS: 3.5 Published: 2009-02-23 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in pagesUTF8/auftrag_allgemeinauftrag.jsp in Plunet BusinessManager 4.1 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the (1) QUB and (2) Bez74 parameters.

Affected Platforms

Plunet Business Manager

Weakness Type

CWE-79

References