Vulnerability Assessment & Network Security Forums



If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important.  If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.


Home >> Browse Vulnerability Assessment Database >> CGI abuses : XSS >> SAP Internet Transaction Server urlmime Cross-Site Scripting Vulnerability


Vulnerability Assessment Details

SAP Internet Transaction Server urlmime Cross-Site Scripting Vulnerability

Vulnerability Assessment Summary
Checks for an XSS flaw in SAP Internet Transaction Server

Detailed Explanation for this Vulnerability Assessment

Summary :

The remote web server contains a CGI script that is vulnerable to a
cross-site scripting attack.

Description :

The remote web server fails to sanitize the contents of the 'urlmime'
parameter to the '/scripts/wgate' script before using it to generate
dynamic web content. An unauthenticated remote attacker may be able
to leverage this issue to inject arbitrary HTML and script code into a
user's browser to be evaluated within the security context of the
affected web site.

See also :

http://archives.neohapsis.com/archives/bugtraq/2006-09/0467.html

Solution :

Unknown at this time.

Network Security Threat Level:

High / CVSS Base Score : 7.0
(AV:R/AC:L/Au:NR/C:P/I:P/A:P/B:N)

Networks Security ID: 20244

Vulnerability Assessment Copyright: This script is Copyright (C) 2006 Tenable Network Security

Cables, Connectors


Vintage Commodor Computer Software Manual SysEx Analog 1  CMDOR CS..SX..A1 C  picture

Vintage Commodor Computer Software Manual SysEx Analog 1 CMDOR CS..SX..A1 C

$100.00



The analog thing modern open source, educational, low-cost analog computer picture

The analog thing modern open source, educational, low-cost analog computer

$800.00



NEW Aquarius+ Mini 8Bit Retro Computer System - Assembled PCB ONLY picture

NEW Aquarius+ Mini 8Bit Retro Computer System - Assembled PCB ONLY

$99.00



IBM Modem Saver Phone Line Tester picture

IBM Modem Saver Phone Line Tester

$7.99



FULLY RECAPPED MACINTOSH CLASSIC II 2 VINTAGE MAC APPLE COMPUTER NEW BATT WORKS picture

FULLY RECAPPED MACINTOSH CLASSIC II 2 VINTAGE MAC APPLE COMPUTER NEW BATT WORKS

$899.00



Landen Computer. Circa 1898. the Rapid Computer Company.  With Original Case. picture

Landen Computer. Circa 1898. the Rapid Computer Company. With Original Case.

$425.00



Apple Macintosh SE Completely Recapped #M5011 4Mbyte RAM, 800K Drive, 20MB HD picture

Apple Macintosh SE Completely Recapped #M5011 4Mbyte RAM, 800K Drive, 20MB HD

$500.00



Macintosh Plus, BlueSCSI, OS 6.x, 4 mb memory - recapped, tested, working. picture

Macintosh Plus, BlueSCSI, OS 6.x, 4 mb memory - recapped, tested, working.

$715.00



Extron RGB-160XI Analog Computer Video 60-378-01 picture

Extron RGB-160XI Analog Computer Video 60-378-01

$187.06



Macintosh Classic/Classic II Analog Board Computer 630-0395 New picture

Macintosh Classic/Classic II Analog Board Computer 630-0395 New

$278.00



Discussions

No Discussions have been posted on this vulnerability.