Sql injection

SQL injection vulnerability in the SRTTGETCOUNTBEFOREKEYRFC function in SAP NetWeaver 7.30 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-6869

SQL injection vulnerability in the SRTTGETCOUNTBEFOREKEYRFC function in SAP NetWeaver 7.30 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-6869

CVE-2013-6869 affects SAP NetWeaver 7.30, where a SQL injection in the SRTT_GET_COUNT_BEFORE_KEY_RFC function could allow remote attackers to execute arbitrary SQL commands via unspecified vectors. The vulnerability’s impact is described as potentially partial confidentiality, integrity, and avai...

PT-2013-6160

Name of the Vulnerable Software and Affected Versions SAP NetWeaver version 7.30 Description A SQL injection issue in the SRTT GET COUNT BEFORE KEY RFC function allows remote attackers to execute arbitrary SQL commands. Recommendations For SAP NetWeaver version 7.30, consider restricting access t...

CVE-2013-6869: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the SRTTGETCOUNTBEFOREKEYRFC function in SAP NetWeaver 7.30 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-6821

Directory traversal vulnerability in the Exportability Check Service in SAP NetWeaver allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2013-6822

GRMGApp in SAP NetWeaver allows remote attackers to have unspecified impact and attack vectors, related to an XML External Entity XXE issue...

CVE-2013-6818

SAP NetWeaver Logviewer 6.30, when running on Windows, allows remote attackers to bypass intended access restrictions via unspecified vectors...

CVE-2013-6819

Cross-site scripting XSS vulnerability in Performance Provider in SAP NetWeaver allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6816

Multiple cross-site scripting XSS vulnerabilities in the 1 JavaDumpService and 2 DataCollector servlets in SAP NetWeaver allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6820

Unrestricted file upload vulnerability in the SAP NetWeaver Development Infrastructure NWDI allows remote attackers to execute arbitrary code by uploading a file with an executable extension via unspecified vectors...

CVE-2013-6815

The SHSTIUPLOADXML function in the Application Server for ABAP AS ABAP in SAP NetWeaver 7.31 and earlier allows remote attackers to cause a denial of service via unspecified vectors, related to an XML External Entity XXE issue...

Xxe

The SHSTIUPLOADXML function in the Application Server for ABAP AS ABAP in SAP NetWeaver 7.31 and earlier allows remote attackers to cause a denial of service via unspecified vectors, related to an XML External Entity XXE issue...

Cross site scripting

Cross-site scripting XSS vulnerability in Performance Provider in SAP NetWeaver allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the 1 JavaDumpService and 2 DataCollector servlets in SAP NetWeaver allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Unrestricted file upload

Unrestricted file upload vulnerability in the SAP NetWeaver Development Infrastructure NWDI allows remote attackers to execute arbitrary code by uploading a file with an executable extension via unspecified vectors...

Xxe

GRMGApp in SAP NetWeaver allows remote attackers to have unspecified impact and attack vectors, related to an XML External Entity XXE issue...

Design/Logic Flaw

GRMGApp in SAP NetWeaver allows remote attackers to bypass intended access restrictions via unspecified vectors...

Directory traversal

Directory traversal vulnerability in the Exportability Check Service in SAP NetWeaver allows remote attackers to read arbitrary files via unspecified vectors...

Design/Logic Flaw

The J2EE Engine in SAP NetWeaver 6.40, 7.02, and earlier allows remote attackers to redirect users to arbitrary web sites, conduct phishing attacks, and obtain sensitive information cookies and SAPPASSPORT via unspecified vectors...