Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2003-0747

5 documents4 sources
Severity
5.0MEDIUM
EPSS
6.9%
top 8.63%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
SAP Internet Transaction Server
Timeline
PublishedOct 20
Latest updateApr 29

Description

wgate.dll in SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to obtain potentially sensitive information such as directory structure and operating system via incorrect parameters (1) ~service, (2) ~templatelanguage, (3) ~language, (4) ~theme, or (5) ~template, which leaks the information in the resulting error message.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDsap/internet_transaction_server4620.2.0.323011

🔴Vulnerability Details

2
GHSA
GHSA-qv28-xgx9-52c7: wgate↗2022-04-29
▶
CVEList
CVE-2003-0747: wgate↗2003-09-06
▶

💥Exploits & PoCs

2
Exploit-DB
SAP Internet Transaction Server 4620.2.0.323011 Build 46B.323011 - Information Disclosure↗2003-08-30
▶
Exploit-DB
IBM AIX 4.3.x/5.1 - 'LSMCODE' Environment Variable Local Buffer Overflow↗2003-06-01
▶