From full-disclosure  Mon Aug 17 14:16:03 2015
From: ERPScan inc <erpscan.online () gmail ! com>
Date: Mon, 17 Aug 2015 14:16:03 +0000
To: full-disclosure
Subject: [FD] =?utf-8?q?=5BERPSCAN-15-013=5D_SAP_NetWeaver_AS_Java_CIM_UPL?= =?utf-8?b?T0FEIOKAkyBYWEU=?=
Message-Id: <CANHWe91vE7eVraYPUwkyxToaRGJhe2WcLa+YmXqb_2sdEqbNcw () mail ! gmail ! com>
X-MARC-Message: https://marc.info/?l=full-disclosure&m=143986125112176
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