SAP Internet Transaction Server 6200.1017.50954.0 - Bu query String JavaScript Splicing Cross-Site Scripting

SAP Internet Transaction Server 6200.1017.50954.0 - Bu query String JavaScript Splicing Cross-Site Scripting source: https://www.securityfocus.com/bid/29103/info SAP Internet Transaction Server is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently...

SAP Internet Transaction Server 6200.1017.50954.0 Bu (WGate) - wgate.dll?~service Cross-Site Scripting

SAP Internet Transaction Server 6200.1017.50954.0 Bu WGate - wgate.dll?service Cross-Site Scripting source: https://www.securityfocus.com/bid/29103/info SAP Internet Transaction Server is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize...

SAP Internet Transaction Server 6200.1017.50954.0 - Bu query String JavaScript Splicing Cross-Site Scripting

source: https://www.securityfocus.com/bid/29103/info SAP Internet Transaction Server is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the...

SAP Internet Transaction Server 6200.1017.50954.0 Bu (WGate) - 'wgate.dll?~service' Cross-Site Scripting

source: https://www.securityfocus.com/bid/29103/info SAP Internet Transaction Server is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the...

CVE-2006-5114

SAP ITS exposed vulnerability: Cross-site scripting in wgate.dll (wgate) affecting SAP Internet Transaction Server versions 6.1 and 6.2. Attacker can inject arbitrary script via the ~urlmime or ~command parameters. This CVE (CVE-2006-5114) shares vectors with CVE-2003-0749 but is a separate entry...

CVE-2006-5114: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in wgate in SAP Internet Transaction Server ITS 6.1 and 6.2 allow remote attackers to inject arbitrary web script or HTML via the 1 urlmime or 2 command parameter, different vectors than CVE-2003-0749...

SAP Internet Transaction Server XSS vulnerability

Vulnerability class : Cross-Site Scripting Discovery date : 13 September 2006 Remote : Yes Credit : ILION Research Labs Vulnerable : SAP ITS Vulnerable version: Versions 6.1 and 6.2 have been found to be vulnerable. Other versions might be too. A XSS Cross-Site-Scripting vulnerability has been...

SAP Internet Transaction Server 6.106.20 - Cross-Site Scripting

SAP Internet Transaction Server 6.106.20 - Cross-Site Scripting source: https://www.securityfocus.com/bid/20244/info SAP Internet Transaction Server ITS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue would allow...

SAP Internet Transaction Server (ITS) Detection

Binary data 3752.prm...

SAP Internet Transaction Server wgate Multiple Parameter XSS

The remote web server fails to sanitize the contents of the 'urlmime' parameter to the '/scripts/wgate' script before using it to generate dynamic web content. An unauthenticated, remote attacker may be able to leverage this issue to inject arbitrary HTML and script code into a user's browser to ...

SAP Internet Transaction Server < 6.20 Patch 18 wgate urlmime Parameter XSS

Binary data 3753.prm...

SAP Internet Transaction Server 6.10/6.20 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/20244/info SAP Internet Transaction Server ITS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue would allow an attacker to steal cookie-based credentials and to launch oth...

SAP Internet Transaction Server Version Detection

Binary data 2733.prm...

CVE-2003-1037

Format string vulnerability in the WGate component for SAP Internet Transaction Server ITS allows remote attackers to execute arbitrary code via a high "trace level."...

CVE-2003-1036

Multiple buffer overflows in the AGate component for SAP Internet Transaction Server ITS allow remote attackers to execute arbitrary code via long 1 command, 2 runtimemode, or 3 session parameters, or 4 a long HTTP Content-Type header...

CVE-2003-1038

The AGate component for SAP Internet Transaction Server ITS allows remote attackers to obtain sensitive information via a command parameter with an AgateInstallCheck value, which provides a list of installed DLLs and full pathnames...

CVE-2003-1036

Multiple buffer overflows in the AGate component for SAP Internet Transaction Server ITS allow remote attackers to execute arbitrary code via long 1 command, 2 runtimemode, or 3 session parameters, or 4 a long HTTP Content-Type header...

CVE-2003-1038

The AGate component for SAP Internet Transaction Server ITS allows remote attackers to obtain sensitive information via a command parameter with an AgateInstallCheck value, which provides a list of installed DLLs and full pathnames...

CVE-2003-1037

Format string vulnerability in the WGate component for SAP Internet Transaction Server ITS allows remote attackers to execute arbitrary code via a high "trace level."...

CVE-2003-1038: Undefined Security Weakness

The AGate component for SAP Internet Transaction Server ITS allows remote attackers to obtain sensitive information via a command parameter with an AgateInstallCheck value, which provides a list of installed DLLs and full pathnames...