OSVDB ID: 45200

Title: SAP Internet Transaction Server (ITS) WGate query String Javascript Splicing XSS

Info

Disclosure

May 08, 2008

Discovery

Unknown

Dates

Exploit

May 08, 2008

Solution

Unknown

Description

Classification

Location: Remote/Network Access Required
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Available
OSVDB: Web Related

Solution

Products

Unknown or Incomplete

References

FrSIRT Advisory: ADV-2008-1466
Bugtraq ID: 29103
Related OSVDB ID: 45199
Other Advisory URL: http://www.portcullis-security.com/275.php
ISS X-Force ID: 42281
Secunia Advisory ID: 30128
CVE ID: 2008-2123 (see also: NVD)
Security Tracker: 1019998
Vendor URL: http://www.sap.com

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/36218