Security Advisory
CVE-2005-3633
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
HTTP response splitting vulnerability in frameset.htm in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to inject arbitrary HTML headers via the sap-exiturl parameter.