Cross-site scripting (XSS) attack using control sequences, SAP security note 1154828 RedRays Team October 8, 2009
Security note Security problem with FileDownload, SAP security note 1145873 RedRays Team October 8, 2009