CVE-2006-5114: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in wgate in SAP Internet Transaction Server ITS 6.1 and 6.2 allow remote attackers to inject arbitrary web script or HTML via the 1 urlmime or 2 command parameter, different vectors than CVE-2003-0749...

SAP Internet Transaction Server < 6.20 Patch 18 wgate urlmime Parameter XSS

Binary data 3753.prm...