Published: 16/02/2006 Updated: 19/10/2018

CVSS v2 Base Score: 4 | Impact Score: 4.9 | Exploitability Score: 4.9

VMScore: 415

Vector: AV:N/AC:H/Au:N/C:P/I:P/A:N

WmRoot/adapter-index.dsp in SAP Business Connector Core Fix 7 and previous versions allows remote malicious users to conduct spoofing (phishing) attacks via an absolute URL in the url parameter, which loads the URL inside a frame.

Vulnerable Product	Search on Vulmon	Subscribe to Product
sap business connector

source: wwwsecurityfocuscom/bid/16668/info SAP Business Connector is prone to a file-access/deletion vulnerability This issue arises due to an access-validation error A successful attack will result in the disclosure of sensitive or privileged information An attacker may also delete arbitrary files This often occurs with superuser ...

source: wwwsecurityfocuscom/bid/16671/info SAP Business Connector is susceptible to an input-validation vulnerability This issue is due to the application's failure to properly sanitize user-supplied input This issue allows remote attackers to execute phishing-style attacks against targeted SAP Business Connector administrators The f ...

source: wwwsecurityfocuscom/bid/16668/info SAP Business Connector is prone to a file-access/deletion vulnerability This issue arises due to an access-validation error A successful attack will result in the disclosure of sensitive or privileged information An attacker may also delete arbitrary files This often occurs with superuser pr ...

NVD-CWE-Other http://www.cybsec.com/vuln/CYBSEC_Security_Pre-Advisory_Phishing_Vector_in_SAP_BC.pdf http://secunia.com/advisories/18880 http://www.securityfocus.com/bid/16671 http://securitytracker.com/id?1015639 http://www.vupen.com/english/advisories/2006/0611 https://exchange.xforce.ibmcloud.com/vulnerabilities/24751 http://www.securityfocus.com/archive/1/434012/30/4980/threaded http://www.securityfocus.com/archive/1/425056/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/27234/

CVE-2006-0731

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect