medium6.8Public exploit code
CVE-2003-0749
Cross-site scripting (XSS) vulnerability in wgate.dll for SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to insert arbitrary web…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SAP Internet Transaction Server 4620.2.0.323011 Build 46B.323011 - Cross-Site Scripting2003-08-30 · remote · multiple · Verified
Impact
Cross-site scripting (XSS) vulnerability in wgate.dll for SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to insert arbitrary web script and steal cookies via the ~service parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sap | Internet Transaction Server | Version 4620.2.0.323011 |