CVE-2003-0748

CVE-2003-0748 describes a directory traversal vulnerability in wgate.dll within SAP Internet Transaction Server (ITS) 4620.2.0.323011. This flaw allows remote attackers to read arbitrary files by using dot-dot backslash sequences in the ~theme parameter, combined with a specially crafted ~template parameter that prevents proper file extension handling. The vulnerability has a CVSS score of 5.0 (medium severity), indicating it can be exploited over the network with low attack complexity to achieve partial confidentiality impact. While not listed on CISA's KEV catalog, an ExploitDB entry (EDB-23070) exists, demonstrating exploit code availability, though there is no evidence of widespread active exploitation or significant community discussion.