CVE-2006-0732

CVE-2006-0732 is a directory traversal vulnerability in SAP Business Connector (BC) 4.6 and 4.7. The issue allows remote attackers to read or delete arbitrary files via the fullName parameter to (1) sapbc/SAP/chopSAPLog.dsp or (2) invoke/sap.monitor.rfcTrace/deleteSingle. Conditions: the product ...