OSVDB: Open Sourced Vulnerability Database

Creditee: Dmitriy Evdokimov

Known Contact Information:

(as of 2011-03-09)

Known Affiliations:

Digital Security Research Group (as of 2011-03-09)

Disclosed Vulnerabilities (16):

Disc. Date	OSVDB ID	CVEID	Title
2012-02-18	79438	2012-4924	Net4Switch ipswcom.dll ActiveX Control cxcmrt.dll CxDbgPrint() Function Alert() Method Debug Message String Creation Remote Overflow
2012-01-20	78540		SAP NetWeaver bcbadmSettings.jsp Multiple Parameter XSS
2011-08-19	74690	2011-5263	SAP NetWeaver RetrieveMailExamples Servlet server Parameter XSS
2011-06-17	73196		SAP NetWeaver Trust Center Service Deployer Multiple Parameter XSS
2011-06-17	73195		SAP NetWeaver performanceProviderRoot testServlet test Parameter XSS
2011-04-12	71835		SAP NetWeaver cas_validate.jsp Multiple Parameter XSS
2011-04-12	71836		SAP NetWeaver pst_enter.jsp archivepath Parameter XSS
2011-03-09	71134		SAP NetWeaver SOAP Adapter HelperServlet action Parameter XSS
2011-03-09	71136		SAP NetWeaver CheckService servlet Multiple Parameter XSS
2011-03-09	71137		SAP NetWeaver ExportabilityCheck servlet Multiple Parameter XSS
2011-03-09	71138		SAP NetWeaver ViewCaches servlet XiDynPage_ThreadId Parameter XSS
2011-03-09	71139		SAP NetWeaver ShowMemLog servlet Multiple Parameter XSS
2011-03-09	71140		SAP NetWeaver error_msg.jsp id Parameter XSS
2011-03-09	71141		SAP NetWeaver ViewCaches.jsp refresh Parameter XSS
2011-03-09	71142		SAP NetWeaver ViewLogger.jsp logger Parameter XSS
2011-03-09	71143		SAP NetWeaver ShowMemLog servlet class Parameter XSS

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.