CVE-2008-2123

Cross-site scripting (XSS) vulnerability in WGate in SAP Internet Transaction Server (ITS) 6.20 allows remote attackers to inject arbitrary web script or HTML via (1) a "" sequence in the ~service parameter to wgate.dll, or (2) Javascript splicing in the query string, a different vector than CVE-2006-5114.

Link	Resource
http://www.portcullis-security.com/275.php	Exploit
http://www.securityfocus.com/bid/29103	Exploit
http://secunia.com/advisories/30128	Vendor Advisory
http://www.securitytracker.com/id?1019998
http://www.vupen.com/english/advisories/2008/1466/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/42281

Configuration 1

cpe:2.3:a:sap:internet_transaction_server:6200.1017.50954.0_build_730827:*:*:*:*:*:*:*

---

Published : 2008-05-09 06:20

Updated : 2017-08-08 01:30

---

NVD link : CVE-2008-2123

Mitre link : CVE-2008-2123

No products.

CWE-79