Описание
Cross-site scripting (XSS) vulnerability in the Client form in the Device Inspector page in SAP Afaria 7 allows remote attackers to inject arbitrary web script or HTML via crafted client name data, aka SAP Security Note 2152669.
Cross-site scripting (XSS) vulnerability in the Client form in the Device Inspector page in SAP Afaria 7 allows remote attackers to inject arbitrary web script or HTML via crafted client name data, aka SAP Security Note 2152669.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2015-6663
- https://erpscan.io/advisories/erpscan-15-019-sap-afaria-stored-xss
- http://packetstormsecurity.com/files/134508/SAP-Afaria-7-Cross-Site-Scripting.html
- http://seclists.org/fulldisclosure/2015/Nov/95
- http://www.securityfocus.com/archive/1/536956/100/0/threaded
Связанные уязвимости
Cross-site scripting (XSS) vulnerability in the Client form in the Device Inspector page in SAP Afaria 7 allows remote attackers to inject arbitrary web script or HTML via crafted client name data, aka SAP Security Note 2152669.
Уязвимость программы управления мобильными устройствами SAP Afaria, позволяющая нарушителю внедрить произвольный веб или HTML-код