14 matches found
Cross site scripting
SAP Internet Transaction Server ITS 6200.X.X has Reflected Cross Site Scripting XSS via certain wgate URIs. NOTE: the vendor has reportedly indicated that there will not be any further releases of this product...
CVE-2018-11415
SAP Internet Transaction Server ITS 6200.X.X has Reflected Cross Site Scripting XSS via certain wgate URIs. NOTE: the vendor has reportedly indicated that there will not be any further releases of this product...
CVE-2018-11415
SAP Internet Transaction Server ITS 6200.X.X has Reflected Cross Site Scripting XSS via certain wgate URIs. NOTE: the vendor has reportedly indicated that there will not be any further releases of this product...
CVE-2018-11415
SAP Internet Transaction Server ITS 6200.X.X has Reflected Cross Site Scripting XSS via certain wgate URIs. NOTE: the vendor has reportedly indicated that there will not be any further releases of this product...
CVE-2018-11415
Summary of CVE-2018-11415 and public details : SAP ITS 6200.X.X is reported to be vulnerable to a reflected Cross-Site Scripting (XSS) flaw triggered via certain wgate URIs. Multiple connected sources confirm an XSS scenario in the SAP Internet Transaction Server 6200.X.X, with references indicat...
CVE-2018-11415: Improper Neutralization of Input During Web Page Generation
SAP Internet Transaction Server ITS 6200.X.X has Reflected Cross Site Scripting XSS via certain wgate URIs. NOTE: the vendor has reportedly indicated that there will not be any further releases of this product...
PT-2018-10558
Name of the Vulnerable Software and Affected Versions SAP Internet Transaction Server ITS version 6200.X.X Description The issue concerns a Reflected Cross Site Scripting XSS vulnerability via certain wgate URIs. It has been reported that the vendor will not release any further updates for this...
CVE-2008-2123
CVE-2008-2123 describes an XSS vulnerability in SAP Internet Transaction Server (ITS) WGate. The issue affects ITS 6.20 where an attacker can inject arbitrary script or HTML via (1) a “” sequence in the ~service parameter to wgate.dll, or (2) Javascript splicing in the query string (stated as a v...
CVE-2008-2123: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in WGate in SAP Internet Transaction Server ITS 6.20 allows remote attackers to inject arbitrary web script or HTML via 1 a "" sequence in the service parameter to wgate.dll, or 2 Javascript splicing in the query string, a different vector than CVE-2006-5114...
CVE-2006-5114: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in wgate in SAP Internet Transaction Server ITS 6.1 and 6.2 allow remote attackers to inject arbitrary web script or HTML via the 1 urlmime or 2 command parameter, different vectors than CVE-2003-0749...
SAP Internet Transaction Server < 6.20 Patch 18 wgate urlmime Parameter XSS
Binary data 3753.prm...
CVE-2003-1037
The CVE-2003-1037 entry describes a format string vulnerability in the WGate component for SAP Internet Transaction Server (ITS). The issue allows remote attackers to execute arbitrary code by crafting input through a high “trace level.” The description does not provide specific affected versions...
CVE-2003-1037: Undefined Security Weakness
Format string vulnerability in the WGate component for SAP Internet Transaction Server ITS allows remote attackers to execute arbitrary code via a high "trace level."...
SAP Internet Transaction Server
To the List, ============================================================ SEC-CONSULT Security REPORT SAP Internet Transcaction Server ======================OOOOOOOOOOOO========================== Product: ITS ITS, Version 4620.2.0.323011, Build 46B.323011 win32/IIS 5.0 Vulnerablities: -...