Matteo Ignaccolo

4 exploits Active since Feb 2009
CVE-2009-0699 EXPLOITDB text WORKING POC
Plunet BusinessManager <4.1 - XSS
Cross-site scripting (XSS) vulnerability in pagesUTF8/auftrag_allgemeinauftrag.jsp in Plunet BusinessManager 4.1 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the (1) QUB and (2) Bez74 parameters.
CVE-2009-0700 EXPLOITDB text WRITEUP
Plunet BusinessManager <4.1 - Auth Bypass
Plunet BusinessManager 4.1 and earlier allows remote authenticated users to bypass access restrictions and (1) read sensitive Customer or Order data via a modified Pfad parameter to pagesUTF8/Sys_DirAnzeige.jsp, or (2) list sensitive Jobs via a direct request to pagesUTF8/auftrag_job.jsp.
CVE-2009-0700 EXPLOITDB text WRITEUP
Plunet BusinessManager <4.1 - Auth Bypass
Plunet BusinessManager 4.1 and earlier allows remote authenticated users to bypass access restrictions and (1) read sensitive Customer or Order data via a modified Pfad parameter to pagesUTF8/Sys_DirAnzeige.jsp, or (2) list sensitive Jobs via a direct request to pagesUTF8/auftrag_job.jsp.
EIP-2026-101349 EXPLOITDB text WRITEUP
Linksys WAP610N - Root Access Security