CVE-2003-0748

Directory traversal vulnerability in wgate.dll for SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to read arbitrary files via…

published September 6, 2003

CVSS
—
EPSS
8%
Percentile
94.7
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in wgate.dll for SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to read arbitrary files via ..\ (dot-dot backslash) sequences in the ~theme parameter and a ~template parameter with a filename followed by space characters, which can prevent SAP from effectively adding a .html extension to the filename.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08052 · 94.7th percentile
Published
2003-09-06T04:00Z
EPSS history
Timeline
  • 06 SEP 04:00Z
    Directory traversal vulnerability in wgate.dll for SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to read arbitrary files via…
    cvelistv5