CVE-2014-4159

Open redirect vulnerability in in la/umTestSSO.jsp in SAP Supplier Relationship Management SRM allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter...

Open redirect

Open redirect vulnerability in in la/umTestSSO.jsp in SAP Supplier Relationship Management SRM allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in la/umTestSSO.jsp in SAP Supplier Relationship Management SRM allows remote attackers to inject arbitrary web script or HTML via the url parameter...

CVE-2014-4159

Open redirect vulnerability in in la/umTestSSO.jsp in SAP Supplier Relationship Management SRM allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter...

CVE-2014-4161

Cross-site scripting XSS vulnerability in la/umTestSSO.jsp in SAP Supplier Relationship Management SRM allows remote attackers to inject arbitrary web script or HTML via the url parameter...

CVE-2014-4159

CVE-2014-4159 is an open redirect vulnerability affecting SAP Supplier Relationship Management (SRM) in the la/umTestSSO.jsp path. The root cause is an unsafe handling of the url parameter, enabling remote attackers to redirect users to arbitrary external sites, potentially facilitating phishing....

CVE-2014-4161

CVE-2014-4161 is an XSS vulnerability reported in SAP Supplier Relationship Management (SRM). The issue affects the script path la/umTestSSO.jsp, where an attacker can inject arbitrary web script or HTML through the url parameter. The Red Hat and NVD entries corroborate the same description. The ...

PT-2014-5712

Name of the Vulnerable Software and Affected Versions SAP Supplier Relationship Management SRM affected versions not specified Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the url parameter in the la/umTestSSO.jsp file...

PT-2014-5710

Name of the Vulnerable Software and Affected Versions SAP Supplier Relationship Management SRM affected versions not specified Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter in the la/umTestSSO.jsp...

CVE-2014-4159: Undefined Security Weakness

Open redirect vulnerability in in la/umTestSSO.jsp in SAP Supplier Relationship Management SRM allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter...

CVE-2014-4161: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in la/umTestSSO.jsp in SAP Supplier Relationship Management SRM allows remote attackers to inject arbitrary web script or HTML via the url parameter...

Fedora Update for srm FEDORA-2014-5308

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 19 Update: srm-1.2.13-1.fc19

srm is a secure replacement for rm1. Unlike the standard rm, it overwrites the data in the target files before unlinkg them. This prevents command-line recovery of the data by examining the raw block device. It may also help frustrate physical examination of the disk, although it's unlikely that...

Fedora 19 : srm-1.2.13-1.fc19 (2014-5308)

Update to new upstream version 1.2.13 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

[secure rm] Command-line Program to Delete Files Securely

srm secure rm is a command-line compatible rm1 which overwrites file contents before unlinking. The goal is to provide drop in security for users who wish to prevent recovery of deleted information, even if the machine is compromised. Download secure rm...

EHACK : The Largest Information Security Awareness Marathon Globally

More than 9000+ participants enter the Guinness book of World Records for the largest congregation for information Security. E-Hack, world largest Ethical Hacking workshop was organized by InfySEC at SRM University on July 27 and 28,2013 . The expected participant count was 4500+ but on the day o...

EHACK : The Largest Information Security Awareness Marathon Globally

More than 9000+ participants enter the Guinness book of World Records for the largest congregation for information Security. E-Hack, world largest Ethical Hacking workshop was organized by InfySEC at SRM University on July 27 and 28,2013 . The expected participant count was 4500+ but on the day o...

LCG Disk Pool Manager SQL Injection

Name: Multiple SQL Injection vulnerabilities in Disk Pool Manager DPM Author: Adam Zabrocki Date: November 27, 2009 Yes, it's very old bug ;P Description: LCG Disk Pool Manager DPM has been developed as part of the LCG project to provide a light-weight implementation of an SRM compliant Storage...

Safenet Sentinel and 7-T Input Sanitization Vulnerability

Overview ICS-CERT originally released advisory ICSA-11-314-01P on the US-CERT secure portal on November 14, 2011. This web page release was delayed to allow users time to download and install the update. Security researcher Carlos Mario Penagos Hollman of Synapse-labs has identified an input...

SAP Internet Sales - XSS

Application: SAP NetWeaver Vendor URL: Bugs: XSS Risk: High Exploits: YES Reported: 08.04.2011 Vendor response: 08.04.2011 Date of Public Advisory: 17.02.2012 Reference: SAP Security Note 1583300 Description SAP NetWeaver 7.0 Internet Sales crm.b2b has XSS vulnerability. Business Risk An attacker...