CVE-2003-0749

Cross-site scripting (XSS) vulnerability in wgate.dll for SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to insert arbitrary web script and steal cookies via the ~service parameter.

• http://archives.neohapsis.com/archives/bugtraq/2003-08/0361.htmlExploit, Vendor Advisory
• http://www.securityfocus.com/bid/8517Exploit, Vendor Advisory
• http://archives.neohapsis.com/archives/bugtraq/2003-08/0361.htmlExploit, Vendor Advisory
• http://www.securityfocus.com/bid/8517Exploit, Vendor Advisory

Published

Oct 20, 2003

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2003-0743Heap-based buffer overflow in smtp_in.c for Exim 3 (exim3) b…
• CVE-2003-0744The fetchnews NNTP client in leafnode 1.9.3 to 1.9.41 allows…
• CVE-2003-0745SNMPc 6.0.8 and earlier performs authentication to the serve…
• CVE-2003-0746Various Distributed Computing Environment (DCE) implementati…
• CVE-2003-0747wgate.dll in SAP Internet Transaction Server (ITS) 4620.2.0.…
• CVE-2003-0748Directory traversal vulnerability in wgate.dll for SAP Inter…
• CVE-2003-0750secure.php in PY-Membres 4.2 and earlier allows remote attac…
• CVE-2003-0751SQL injection vulnerability in pass_done.php for PY-Membres …
• CVE-2003-0752SQL injection vulnerability in global.php3 of AttilaPHP 3.0,…
• CVE-2003-0753nphpd.php in newsPHP 216 and earlier allows remote attackers…
• CVE-2003-0754nphpd.php in newsPHP 216 and earlier allows remote attackers…
• CVE-2003-0755Buffer overflow in sys_cmd.c for gtkftpd 1.0.4 and earlier a…