CVE-2005-3635

SAP Web Application Server (WAS) 6.10–7.00 has multiple cross-site scripting (XSS) vulnerabilities. The issues allow remote attackers to inject arbitrary web script or HTML via (1) sap-syscmd in sap-syscmd and (2) the BspApplication field in the SYSTEM PUBLIC test application. The sources confirm...

CVE-2005-3636: Undefined Security Weakness

Cross-site scripting XSS vulnerability in SAP Web Application Server WAS 6.10 allows remote attackers to inject arbitrary web script or HTML via Error Pages...

CVE-2005-3635: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in SAP Web Application Server WAS 6.10 through 7.00 allow remote attackers to inject arbitrary web script or HTML via 1 the sap-syscmd in sap-syscmd and 2 the BspApplication field in the SYSTEM PUBLIC test application...

CVE-2005-3633: Undefined Security Weakness

HTTP response splitting vulnerability in frameset.htm in SAP Web Application Server WAS 6.10 through 7.00 allows remote attackers to inject arbitrary HTML headers via the sap-exiturl parameter...

CVE-2005-3634: Undefined Security Weakness

frameset.htm in the BSP runtime in SAP Web Application Server WAS 6.10 through 7.00 allows remote attackers to log users out and redirect them to arbitrary web sites via a close command in the sap-sessioncmd parameter and a URL in the sap-exiturl parameter...

SAP Web Application Server 6.x7.0 - Input Validation

SAP Web Application Server 6.x7.0 - Input Validation source: https://www.securityfocus.com/bid/18006/info SAP Web Application Server is prone to an input-validation vulnerability that results in HTTP response-splitting attacks. This issue is due to a failure in the application to properly sanitiz...

SAP Web Application Server 6.x7.0 - Error Page Cross-Site Scripting

SAP Web Application Server 6.x7.0 - Error Page Cross-Site Scripting source: https://www.securityfocus.com/bid/15361/info SAP Web Application Server is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied...

SAP Web Application Server 6.x7.0 - Open Redirection

SAP Web Application Server 6.x7.0 - Open Redirection source: https://www.securityfocus.com/bid/15362/info SAP Web Application Server is reported prone to a remote URI redirection vulnerability. It is reported that an attacker can exploit this issue by supplying the URI of a malicious site through...

Multiple SAP Web Application Server vulnerabilities

Crossite scripting, request redirection, HTTP response splitting...

[Full-disclosure] CYBSEC - Security Advisory: Multiple XSS in SAP WAS

The following advisory is also available in PDF format for download at: http://www.cybsec.com/vuln/CYBSECSecurityAdvisoryMultipleXSSinSAPWAS.pdf CYBSEC S.A. www.cybsec.com Advisory Name: Multiple XSS in SAP WAS Web Application Server Vulnerability Class: Cross-Site Scripting Release Date:...

[Full-disclosure] CYBSEC - Security Advisory: Phishing Vector in SAP WAS

The following advisory is also available in PDF format for download at: http://www.cybsec.com/vuln/CYBSECSecurityAdvisoryPhishingVectorinSAPWAS.pdf CYBSEC S.A. www.cybsec.com Advisory Name: Phishing Vector in SAP WAS Web Application Server Vulnerability Class: Phishing Vector / Improper Input...

SAP Web Application Server 6.x7.0 - frameset.htm?sap-syscmd Cross-Site Scripting

SAP Web Application Server 6.x7.0 - frameset.htm?sap-syscmd Cross-Site Scripting source: https://www.securityfocus.com/bid/15361/info SAP Web Application Server is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize...

SAP Web Application Server 6.x/7.0 - Input Validation

source: https://www.securityfocus.com/bid/18006/info SAP Web Application Server is prone to an input-validation vulnerability that results in HTTP response-splitting attacks. This issue is due to a failure in the application to properly sanitize user-supplied input. A remote attacker may exploit...

SAP Web Application Server 6.x/7.0 - Error Page Cross-Site Scripting

source: https://www.securityfocus.com/bid/15361/info SAP Web Application Server is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script...

SAP Web Application Server 6.x/7.0 - Open Redirection

source: https://www.securityfocus.com/bid/15362/info SAP Web Application Server is reported prone to a remote URI redirection vulnerability. It is reported that an attacker can exploit this issue by supplying the URI of a malicious site through the 'sap-exiturl' parameter. A successful attack may...

Talentsoft Web+ Information Disclosure Vulnerability

The remote host appears to be running Web+ Application Server which is affected by an information disclosure flaw. SPDX-FileCopyrightText: 2004 David Kyger Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2001-0366: Undefined Security Weakness

saposcol in SAP R/3 Web Application Server Demo before 1.5 trusts the PATH environmental variable to find and execute the expand program, which allows local users to obtain root access by modifying the PATH to point to a Trojan horse expand program...

CVE-2000-0848: Undefined Security Weakness

Buffer overflow in IBM WebSphere web application server WAS allows remote attackers to execute arbitrary commands via a long Host: request header...

New Allaire ColdFusion DoS

Foundstone, Inc. http://www.foundstone.com "Securing the Dot Com World" Security Advisory Allaire's ColdFusion ---------------------------------------------------------------------------- --------- FS Advisory ID: FS-060700-1-CFM Release Date: June 7, 2000 Product: ColdFusion Web Application Serv...