EUVD-2012-1315

Malware in sbrugna...

EUVD-2014-8497

Malware in sbrugna...

EUVD-2012-1316

Malware in sbrugna...

CVE-2014-8661

The SAP CRM Internet Sales module allows remote attackers to execute arbitrary commands via unspecified vectors...

CVE-2014-8661

The SAP CRM Internet Sales module allows remote attackers to execute arbitrary commands via unspecified vectors...

Command injection

The SAP CRM Internet Sales module allows remote attackers to execute arbitrary commands via unspecified vectors...

CVE-2014-8661

Technical details about CVE-2014-8661 (affected SAP CRM Internet Sales) are not publicly provided in the supplied documents; monitor for updates from vendors and advisories before assessing impact, exploitability, or fixes.

CVE-2014-8661

The SAP CRM Internet Sales module allows remote attackers to execute arbitrary commands via unspecified vectors...

CVE-2014-8661: Improper Control of Generation of Code

The SAP CRM Internet Sales module allows remote attackers to execute arbitrary commands via unspecified vectors...

Directory traversal

Multiple directory traversal vulnerabilities in SAP NetWeaver 7.0 allow remote authenticated users to read arbitrary files via a .. dot dot in the logfilename parameter to 1 b2b/admin/log.jsp or 2 b2b/admin/logview.jsp in the Internet Sales crm.b2b component, or 3 ipc/admin/log.jsp or 4...

CVE-2012-1289

SAP NetWeaver 7.0 is affected by multiple directory traversal vulnerabilities in log.jsp/log_view.jsp under Internet Sales (crm.b2b) and Application Administration (com.sap.ipc.webapp.ipc). The root cause is improper validation of the logfilename parameter, allowing remote authenticated users to ...

CVE-2012-1290

The CVE-2012-1290 entry describes a Cross-site scripting (XSS) vulnerability in SAP NetWeaver 7.0, specifically in the Internet Sales (crm.b2b) module and the b2b/auction/container.jsp page. The issue is exploitable via the _loadPage parameter, allowing an attacker to inject arbitrary web script ...

PT-2012-3177

Name of the Vulnerable Software and Affected Versions SAP NetWeaver version 7.0 Description The issue allows remote authenticated users to read arbitrary files via a .. dot dot in the logfilename parameter to API endpoints such as "b2b/admin/log.jsp" or "b2b/admin/log view.jsp" in the Internet...

PT-2012-3178

Name of the Vulnerable Software and Affected Versions SAP NetWeaver version 7.0 Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the loadPage parameter in the b2b/auction/container.jsp file within the Internet...

CVE-2012-1289: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in SAP NetWeaver 7.0 allow remote authenticated users to read arbitrary files via a .. dot dot in the logfilename parameter to 1 b2b/admin/log.jsp or 2 b2b/admin/logview.jsp in the Internet Sales crm.b2b component, or 3 ipc/admin/log.jsp or 4...