CVE:CVE-2006-0731
CNNVD:CNNVD-200602-241
SAP Business Connector Core Fix 7及之前版本的WmRoot/adapter-index.dsp可使远程攻击者借助url参数中的绝对URL(加载框架中的URL)执行欺骗(仿冒)攻击。
solution:Upgrade sap business_connector to a higher version than core_fix_7,and avoid the version (,core_fix_7]