cve/2005/CVE-2005-3633.md

CVE-2005-3633

Description

HTTP response splitting vulnerability in frameset.htm in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to inject arbitrary HTML headers via the sap-exiturl parameter.

POC

Reference

• http://marc.info/?l=bugtraq&m=113156438708932&w=2
• http://securityreason.com/securityalert/164

Github

• https://github.com/ARPSyndicate/cve-scores