securityboulevard.com
Dynamic Code Execution
This short article continues the discussion on the second section of Secure ABAP Development Guide called ‘Critical Calls’. Dynamic code execution in ABAP is possible via ASSIGN, PERFORM or CREATE OBJECT statements. These statements may contain a potentially harmful variable input from variable content leading to full system compromise which can be hard to investigate. The post Dynamic Code Execution appeared first on ERPScan.
Research Team