Vulnerabilities > CVE-2007-3613 - Cross-Site Scripting vulnerability in SAP Internet Graphics Server PARAMS

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
sap
exploit available
NVD
Published: 2007-07-06
Updated: 2018-10-15

Summary

Cross-site scripting (XSS) vulnerability in ADM:GETLOGFILE in SAP Internet Graphics Service (IGS) allows remote attackers to inject arbitrary web script or HTML via the PARAMS parameter.

Vulnerable Configurations

Part Description Count
Application
Sap
9

Exploit-Db

descriptionSAP Internet Graphics Server 7.0 PARAMS Cross Site Scripting Vulnerability. CVE-2007-3613. Remote exploits for multiple platform
idEDB-ID:30279
last seen2016-02-03
modified2007-07-05
published2007-07-05
reporterMark Litchfield
sourcehttps://www.exploit-db.com/download/30279/
titleSAP Internet Graphics Server <= 7.0 PARAms Cross-Site Scripting Vulnerability

References