Breaking SAP Portal - Proidea
Breaking SAP Portal - Proidea
Breaking SAP Portal - Proidea
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
Investigation<br />
#Plain###192.168.192.26 : GET<br />
/irj/servlet/prt/portal/prtroot/com.sap.portal.usermanagement.ad<br />
min.UserMapping?systemid=MS_EXCHANGEaaaa%3C/script%3E%3<br />
Cscript%3Ealert(%27xSS%27)%3C/script%3E HTTP/1.1 200 3968#<br />
j2ee\cluster\\log\system\httpaccess\responses.trc