SAP

Nice post:

http://blog.c22.cc/2011/11/18/deepsec-your-crown-jewels-online-further-attacks-to-sap-web-applications/