← back
CVE-2005-3634

CVE-2005-3634

EPSS 18.2%
frameset.htm in the BSP runtime in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to log users out and redirect them to arbitrary web sites via a close command in the sap-sessioncmd parameter and a URL in the sap-exiturl parameter.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/26488unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://marc.info/?l=bugtraq&m=113156525006667&w=2http://secunia.com/advisories/17515/http://securityreason.com/securityalert/163https://exchange.xforce.ibmcloud.com/vulnerabilities/23031http://www.cybsec.com/vuln/CYBSEC_Security_Advisory_Multiple_XSS_in_SAP_WAS.pdfhttp://www.securityfocus.com/bid/15362http://www.securitytracker.com/alerts/2005/Nov/1015174.htmlhttp://www.vupen.com/english/advisories/2005/2361