CVE-2018-2382

CVE-2018-2382 affects SAP Internet Graphics Server (versions 7.20, 7.20EXT, 7.45, 7.49, 7.53). The vulnerability enables a malicious user to store graphics in a controlled area and subsequently access information from the system area that would normally be unavailable. The connected documents pro...

CVE-2018-2392

Under certain conditions SAP Internet Graphics Server IGS 7.20, 7.20EXT, 7.45, 7.49, 7.53, fails to validate XML External Entity appropriately causing the SAP Internet Graphics Server IGS to become unavailable. Recent assessments: gwillcox-r7 at October 06, 2020 4:04pm UTC reported: This...

CVE-2018-2393

Under certain conditions SAP Internet Graphics Server IGS 7.20, 7.20EXT, 7.45, 7.49, 7.53, fails to validate XML External Entity appropriately causing the SAP Internet Graphics Server IGS to become unavailable. Recent assessments: gwillcox-r7 at October 06, 2020 4:05pm UTC reported: This...

SAP Internet Graphics Server Memory Corruption Vulnerability

SAP Internet Graphics Server IGS is a component of the SAP R/3 enterprise environment from SAP, Germany, that provides graphics services. A memory corruption vulnerability exists in SAP Internet Graphics Server. An attacker could exploit this vulnerability to execute arbitrary code in the context...

sap internet graphics server 6.40 - Directory Traversal vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14369/info Internet Graphics Server is affected by a directory traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. A remote unauthorized user can disclose t...

SAP Internet Graphics Server <= 7.0 PARAMS Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/24775/info SAP Internet Graphics Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may perform cross-site scripting attacks on...

Adobe Document Server 6.0 Extensions AlterCast op Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/17500/info Adobe Document Server for Reader Extensions, included with Graphics Server and Document Server, is prone to multiple vulnerabilities that may allow remote attackers to: - perform cross-site scripting attacks -...

NGS-sapigs-xssheap.txt

======= Summary ======= Name: SAP Internet Graphics Server XSS and Heap Overflow Release Date: 5 July 2007 Reference: NGS00487 Discover: Mark Litchfield Vendor: SAP Vendor Reference: SECRES-288 Systems Affected: Risk: Medium Status: Fixed ======== TimeLine ======== Discovered: 4 January 2007...

SAP Internet Graphics Server 7.0 - ADM:GETLOGFILE?PARAMS Cross-Site Scripting

SAP Internet Graphics Server 7.0 - ADM:GETLOGFILE?PARAMS Cross-Site Scripting source: https://www.securityfocus.com/bid/24775/info SAP Internet Graphics Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may...

SAP Internet Graphics Server 7.0 - 'ADM:GETLOGFILE?PARAMS' Cross-Site Scripting

source: https://www.securityfocus.com/bid/24775/info SAP Internet Graphics Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may perform cross-site scripting attacks on unsuspecting users in the context of t...

SAP Internet Graphics Server远程拒绝服务漏洞

SAP Internet Graphics Server是SAP R/3企业环境的一个组件，可提供图形服务。 SAP Internet Graphics Server不正确处理用户提交的HTTP请求，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 目前没有详细漏洞细节提供，成功利用此漏洞可导致程序停止响应。 SAP Internet Graphics Server 6.40 Patch 11 SAP Internet Graphics Server 6.40 SAP Internet Graphics Server 7.00 Patch 3 SAP Internet Graphics...

SAP Internet Graphics Server远程缓冲区溢出漏洞

SAP Internet Graphics Server是SAP R/3企业环境的一个组件，可提供图形服务。 SAP Internet Graphics Server不正确处理用户提交的HTTP请求，远程攻击者可以利用漏洞进行缓冲区溢出攻击，可能以进程权限执行任意指令。 目前没有详细漏洞细节提供，成功利用漏洞可导致在UNIX系统下获得SAP系统管理员特权，而在windows下可导致获得SYSTEM权限。 SAP Internet Graphics Server 6.40 Patch 11 SAP Internet Graphics Server 6.40 SAP Internet...

SAP IGS未明漏洞

Internet Graphics ServerIGS是SAP R/3企业环境的一个组件，可提供图形服务。 SAP IGS存在多个安全问题，远程攻击者可以利用漏洞关闭SAP IGS服务，访问配置文件，执行未授权服务配置等攻击。 目前没有详细漏洞细节提供。 SAP Internet Graphics Server 6.40 Patch 11 SAP Internet Graphics Server 7.00 Patch 3 SAP Internet Graphics Server 7.00 Patch 2 SAP Internet Graphics Server 7.00 Patch 1...

Adobe Document Server 6.0 Extensions - ads-readerext?actionID Cross-Site Scripting

Adobe Document Server 6.0 Extensions - ads-readerext?actionID Cross-Site Scripting source: https://www.securityfocus.com/bid/17500/info Adobe Document Server for Reader Extensions, included with Graphics Server and Document Server, is prone to multiple vulnerabilities that may allow remote...

Adobe Document Server 6.0 Extensions - AlterCast?op Cross-Site Scripting

Adobe Document Server 6.0 Extensions - AlterCast?op Cross-Site Scripting source: https://www.securityfocus.com/bid/17500/info Adobe Document Server for Reader Extensions, included with Graphics Server and Document Server, is prone to multiple vulnerabilities that may allow remote attackers to: -...

Adobe Document Server 6.0 Extensions - 'ads-readerext?actionID' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17500/info Adobe Document Server for Reader Extensions, included with Graphics Server and Document Server, is prone to multiple vulnerabilities that may allow remote attackers to: - perform cross-site scripting attacks - gain access to potentially sensiti...

Command injection

Adobe Graphics Server 2.0 and 2.1 formerly AlterCast and Adobe Document Server ADS 5.0 and 6.0 allows local users to read files with certain extensions or overwrite arbitrary files and execute code via a crafted SOAP request to the AlterCast web service in which the request uses the 1 saveContent...

CVE-2006-1182

Adobe Graphics Server 2.0 and 2.1 formerly AlterCast and Adobe Document Server ADS 5.0 and 6.0 allows local users to read files with certain extensions or overwrite arbitrary files and execute code via a crafted SOAP request to the AlterCast web service in which the request uses the 1 saveContent...

CVE-2006-1182

Adobe Graphics Server 2.x and Adobe Document Server (ADS) 5.x/6.x are affected by CVE-2006-1182. A crafted SOAP request to the AlterCast web service can invoke saveContent, saveOptimized ADS, or loadContent commands to read files with certain extensions, overwrite arbitrary files, or execute code...

CVE-2006-1182

Adobe Graphics Server 2.0 and 2.1 formerly AlterCast and Adobe Document Server ADS 5.0 and 6.0 allows local users to read files with certain extensions or overwrite arbitrary files and execute code via a crafted SOAP request to the AlterCast web service in which the request uses the 1 saveContent...