Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2003-0748

4 documents4 sources
Severity
5.0MEDIUM
EPSS
6.9%
top 8.63%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
SAP Internet Transaction Server
Timeline
PublishedOct 20
Latest updateApr 29

Description

Directory traversal vulnerability in wgate.dll for SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to read arbitrary files via ..\ (dot-dot backslash) sequences in the ~theme parameter and a ~template parameter with a filename followed by space characters, which can prevent SAP from effectively adding a .html extension to the filename.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDsap/internet_transaction_server4620.2.0.323011

🔴Vulnerability Details

2
GHSA
GHSA-fgvr-w82f-6xvw: Directory traversal vulnerability in wgate↗2022-04-29
▶
CVEList
CVE-2003-0748: Directory traversal vulnerability in wgate↗2003-09-06
▶

💥Exploits & PoCs

1
Exploit-DB
sap internet transaction server 4620.2.0.323011 build 46b.323011 - Directory Traversal↗2003-08-30
▶