SAP Web AS multiple security vulnerabilities

Code execution with Internet Communication Framework, information leak, crossite scripting, directory traversal...

[Full-disclosure] Multiple vulnerabilities in SAP Web Application Server 6.40 and 7.00

Advisory Name : Multiple vulnerabilities in SAP Web Application Server Release Date : 2 November 2006 Application : SAP Web AS 6.40 patch 136 and 7.00 patch 66 Platform : All platforms except the third vulnerability Impacts : Remote file disclosure, remote DoS, local privilege escalation Author :...