CVE-2006-0731

published 2006-02-16

CVE-2006-0731: WmRoot/adapter-index.dsp in SAP Business Connector Core Fix 7 and earlier allows remote attackers to conduct spoofing (phishing) attacks via an absolute URL in…

medium 4 CVSS 3.1

AV N AC H Au N C P I P A N

EXPLOIT

WmRoot/adapter-index.dsp in SAP Business Connector Core Fix 7 and earlier allows remote attackers to conduct spoofing (phishing) attacks via an absolute URL in the url parameter, which loads the URL inside a frame.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
sap	business_connector	<= core_fix_7	—