CVE-2003-0940

SAP DB web-tools (web server component sqlfopenc) contains a directory traversal vulnerability that allows remote reading of arbitrary files via dot-dot sequences in URLs. Affected: SAP DB web-tools prior to 7.4.03.30; attack surface includes the web-server administration pages and default servic...

CVE-2003-0941

web-tools in SAP DB before 7.4.03.30 allows remote attackers to access the Web Agent Administration pages and modify configuration via a direct request to waadmin.wa...

CVE-2003-0943

CVE-2003-0943 affects SAP DB web-tools prior to 7.4.03.30. The default-enabled services (waecho, Web SQL Interface websql, Web Database Manager webdbm) can enable remote attackers to view potentially sensitive information or redirect attacks against internal databases. Connected sources also desc...

Multiple SAPDB bugs

Local privelege escalation via DLL spoofing in working directory, remote buffer overflow, multiple web-tools issues...