CVE-2003-0950

CVE-2003-0950 affects PeopleSoft PeopleTools 8.1x, 8.2x, and 8.4x. The issue allows remote attackers to execute arbitrary commands by uploading a file to the IClient Servlet, guessing the directory name (based on system time) used to store the file, and directly requesting that file. The underlyi...

CVE-2003-0629

CVE-2003-0629 concerns the PeopleSoft IScript environment in PeopleTools 8.43 and earlier. The XSS vulnerability arises from how the IScript interface processes HTTP requests, allowing remote attackers to inject arbitrary web script via a crafted request. Impact can include theft of session data ...

CVE-2003-0950

PeopleSoft PeopleTools 8.1x, 8.2x, and 8.4x allows remote attackers to execute arbitrary commands by uploading a file to the IClient Servlet, guessing the insufficiently random system time name of the directory used to store the file, and directly requesting that file...

CVE-2003-0626

psdoccgi.exe in PeopleSoft PeopleTools 8.4 through 8.43 allows remote attackers to read arbitrary files via the 1 headername or 2 footername arguments...

PeopleSoft Grid Option Vulnerability

Vendor: PeopleSoft PS Solution ID: 200749183 Product: People Tools Version: 8.42 Platform: Solaris 8, BEA WebLogic, Others? Remote/Local: Remote, Unauthenticated Title: File Availability Impact: Data accessible by Everyone. Description: PeopleTools 8.42 has a "grid" option, which allows a user to...

CVE-2003-0104

Directory traversal vulnerability in PeopleTools 8.10 through 8.18, 8.40, and 8.41 allows remote attackers to overwrite arbitrary files via the SchedulerTransfer servlet...

ISS Security Brief: PeopleSoft PeopleTools Remote Command Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security Brief March 10, 2003 PeopleSoft PeopleTools Remote Command Execution Vulnerability Synopsis: ISS X-Force has discovered a flaw in the PeopleSoft PeopleTools application framework. PeopleSoft enterprise software enables manageme...

CVE-2002-1252

The Application Messaging Gateway for PeopleTools 8.1x before 8.19, as used in various PeopleSoft products, allows remote attackers to read arbitrary files via certain XML External Entities XXE fields in an HTTP POST request that is processed by the SimpleFileHandler handler...