Description
slxweb.dll in SalesLogix 6.1 allows remote attackers to cause a denial service (application crash) via an invalid HTTP request, which might also leak sensitive information in the ErrorLogMsg cookie.
References
- saleslogix-info-disclosure(17750) vdb-entry
- 10943 vdb-entry
- 12883 third-party-advisory
- 20041018 Multiple vulnerabilities in Sage Saleslogix mailing-list
- 1011769 vdb-entry
- 11450 vdb-entry
- 20041018 Multiple vulnerabilities in Sage Saleslogix mailing-list