EUVD-2003-0739

Malware in sbrugna...

EUVD-2003-1026

Malware in sbrugna...

EUVD-2003-0740

Malware in sbrugna...

EUVD-2018-3446

Malware in sbrugna...

EUVD-2003-1028

Malware in sbrugna...

EUVD-2017-7866

Malware in sbrugna...

EUVD-2003-0738

Malware in sbrugna...

EUVD-2003-1027

Malware in sbrugna...

SAP Internet Transaction Server Cross-Site Scripting Vulnerability

SAP Internet Transaction Server ITS is an Internet-based transaction service program. A cross-site scripting vulnerability exists in SAP ITS version 6200.X.X. A remote attacker can inject arbitrary Web script or HTML with the help of wgate URIs. A remote attacker can exploit this vulnerability to...

SAP Internet Transaction Server 6200.x - Session Fixation / Cross-Site Scripting

Exploit Title: SAP Internet Transaction Server ITS 6200.X.X - Session Fixation/ Cross-Site Scripting Dork: /scripts/wgate/ Date: 25.05.2018 Exploit Author: J. Carrillo Lencina 0xd0m7 Vendor Homepage: https://www.sap.com Version: SAP ITS 6200.X.X Category: Webapps Tested on: All Platforms CVE:...

SAP Internet Transaction Server 6200.x Session Fixation / Cross Site Scripting

Exploit Title: SAP Internet Transaction Server ITS 6200.X.X - Session Fixation/ Cross-Site Scripting Dork: /scripts/wgate/ Date: 25.05.2018 Exploit Author: J. Carrillo Lencina 0xd0m7 Vendor Homepage: https://www.sap.com Version: SAP ITS 6200.X.X Category: Webapps Tested on: All Platforms CVE:...

SAP Internet Transaction Server 6200.x - Session Fixation Cross-Site Scripting

SAP Internet Transaction Server 6200.x - Session Fixation Cross-Site Scripting Exploit Title: SAP Internet Transaction Server ITS 6200.X.X - Session Fixation/ Cross-Site Scripting Dork: /scripts/wgate/ Date: 25.05.2018 Exploit Author: J. Carrillo Lencina 0xd0m7 Vendor Homepage: https://www.sap.co...

CVE-2018-11415

SAP Internet Transaction Server ITS 6200.X.X has Reflected Cross Site Scripting XSS via certain wgate URIs. NOTE: the vendor has reportedly indicated that there will not be any further releases of this product...

CVE-2018-11415

SAP Internet Transaction Server ITS 6200.X.X has Reflected Cross Site Scripting XSS via certain wgate URIs. NOTE: the vendor has reportedly indicated that there will not be any further releases of this product...

CVE-2018-11415: Improper Neutralization of Input During Web Page Generation

SAP Internet Transaction Server ITS 6200.X.X has Reflected Cross Site Scripting XSS via certain wgate URIs. NOTE: the vendor has reportedly indicated that there will not be any further releases of this product...

CVE-2017-16682

SAP NetWeaver Internet Transaction Server ITS, SAP Basis from 7.00 to 7.02, 7.30, 7.31, 7.40, from 7.50 to 7.52, allows an attacker with administrator credentials to inject code that can be executed by the application and thereby control the behavior of the application...

CVE-2017-16682: Improper Control of Generation of Code

SAP NetWeaver Internet Transaction Server ITS, SAP Basis from 7.00 to 7.02, 7.30, 7.31, 7.40, from 7.50 to 7.52, allows an attacker with administrator credentials to inject code that can be executed by the application and thereby control the behavior of the application...

SAP NetWeaver Internet Transaction Server Command Injection Vulnerability

SAP NetWeaver is a service-oriented, integrated application platform from SAP, of which the Internet Transaction Server ITS is a server for applications to communicate with the Internet. A command injection vulnerability exists in ITS in SAP NetWeaver. An attacker could exploit this vulnerability...

SAP Internet Transaction Server Information Disclosure - Ver2 (CVE-2003-0747)

An information disclosure vulnerability has been reported in Sap Internet Transaction Server. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

SAP Internet Transaction Server 6200.1017.50954.0 - Bu query String Javascript Splicing XSS

No description provided by source. source: http://www.securityfocus.com/bid/29103/info SAP Internet Transaction Server is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to...