CVE-2003-1037

The CVE-2003-1037 entry describes a format string vulnerability in the WGate component for SAP Internet Transaction Server (ITS). The issue allows remote attackers to execute arbitrary code by crafting input through a high “trace level.” The description does not provide specific affected versions...

Microsoft Internet Explorer 5.0.1 - ITS Protocol Zone Bypass (MS04-013)

Microsoft Internet Explorer 5.0.1 - ITS Protocol Zone Bypass MS04-013 source: https://www.securityfocus.com/bid/9658/info Microsoft Internet Explorer has been reported prone to a vulnerability that may permit hostile content to be interpreted in the Local Zone. The issue may be exploited via the...

Microsoft Internet Explorer 5.0.1 - ITS Protocol Zone Bypass (MS04-013)

source: https://www.securityfocus.com/bid/9658/info Microsoft Internet Explorer has been reported prone to a vulnerability that may permit hostile content to be interpreted in the Local Zone. The issue may be exploited via the ITS InfoTech Storage Protocol URI handler. It is possible to use this...

CVE-2003-0747

CVE-2003-0747 affects SAP Internet Transaction Server (ITS) 4620.2.0.323011 via its wgate.dll. The vulnerability arises from incorrect parameters (~service, ~templatelanguage, ~language, ~theme, ~template) that cause error messages to leak potentially sensitive information, including directory st...

CVE-2003-0748

CVE-2003-0748 describes a directory traversal in SAP ITS 4620.2.0.323011 via wgate.dll, allowing remote readers to access arbitrary files through dot-dot backslash sequences in the ~theme parameter and a mis-handled ~template parameter with a filename followed by spaces that can prevent a .html e...

CVE-2003-0749: Undefined Security Weakness

Cross-site scripting XSS vulnerability in wgate.dll for SAP Internet Transaction Server ITS 4620.2.0.323011 allows remote attackers to insert arbitrary web script and steal cookies via the service parameter...

CVE-2003-0747: Undefined Security Weakness

wgate.dll in SAP Internet Transaction Server ITS 4620.2.0.323011 allows remote attackers to obtain potentially sensitive information such as directory structure and operating system via incorrect parameters 1 service, 2 templatelanguage, 3 language, 4 theme, or 5 template, which leaks the...

CVE-2003-0748: Undefined Security Weakness

Directory traversal vulnerability in wgate.dll for SAP Internet Transaction Server ITS 4620.2.0.323011 allows remote attackers to read arbitrary files via ..\ dot-dot backslash sequences in the theme parameter and a template parameter with a filename followed by space characters, which can preven...