CVE-2008-2123

CVE-2008-2123 describes an XSS vulnerability in SAP Internet Transaction Server (ITS) WGate. The issue affects ITS 6.20 where an attacker can inject arbitrary script or HTML via (1) a “” sequence in the ~service parameter to wgate.dll, or (2) Javascript splicing in the query string (stated as a v...