CVE-2003-0950

PeopleSoft PeopleTools 8.1x, 8.2x, and 8.4x allows remote attackers to execute arbitrary commands by uploading a file to the IClient Servlet, guessing the insufficiently random system time name of the directory used to store the file, and directly requesting that file...

CVE-2003-0950

CVE-2003-0950 affects PeopleSoft PeopleTools 8.1x, 8.2x, and 8.4x. The issue allows remote attackers to execute arbitrary commands by uploading a file to the IClient Servlet, guessing the directory name (based on system time) used to store the file, and directly requesting that file. The underlyi...

CVE-2003-0628

This CVE affects the PeopleSoft Gateway Administration servlet (gateway.administration) in PeopleTools 8.43 and earlier. An attacker can disclose the full pathnames of server-side include (SSI) files by sending an HTTP request with an invalid value, a path-disclosure vulnerability impacting confi...

CVE-2003-0629

CVE-2003-0629 concerns the PeopleSoft IScript environment in PeopleTools 8.43 and earlier. The XSS vulnerability arises from how the IScript interface processes HTTP requests, allowing remote attackers to inject arbitrary web script via a crafted request. Impact can include theft of session data ...

CVE-2003-0629

Cross-site scripting XSS vulnerability in PeopleSoft IScript environment for PeopleTools 8.43 and earlier allows remote attackers to insert arbitrary web script via a certain HTTP request to IScript...

CVE-2003-0628: Undefined Security Weakness

PeopleSoft Gateway Administration servlet gateway.administration in PeopleTools 8.43 and earlier allows remote attackers to obtain the full pathnames for server-side include SSI files via an HTTP request with an invalid value...

CVE-2003-0629: Undefined Security Weakness

Cross-site scripting XSS vulnerability in PeopleSoft IScript environment for PeopleTools 8.43 and earlier allows remote attackers to insert arbitrary web script via a certain HTTP request to IScript...

CVE-2003-0950: Undefined Security Weakness

PeopleSoft PeopleTools 8.1x, 8.2x, and 8.4x allows remote attackers to execute arbitrary commands by uploading a file to the IClient Servlet, guessing the insufficiently random system time name of the directory used to store the file, and directly requesting that file...

CVE-2003-0626

psdoccgi.exe in PeopleSoft PeopleTools 8.4 through 8.43 allows remote attackers to read arbitrary files via the 1 headername or 2 footername arguments...

PeopleSoft Grid Option Vulnerability

Vendor: PeopleSoft PS Solution ID: 200749183 Product: People Tools Version: 8.42 Platform: Solaris 8, BEA WebLogic, Others? Remote/Local: Remote, Unauthenticated Title: File Availability Impact: Data accessible by Everyone. Description: PeopleTools 8.42 has a "grid" option, which allows a user to...

CVE-2003-0104

Directory traversal vulnerability in PeopleTools 8.10 through 8.18, 8.40, and 8.41 allows remote attackers to overwrite arbitrary files via the SchedulerTransfer servlet...

ISS Security Brief: PeopleSoft PeopleTools Remote Command Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security Brief March 10, 2003 PeopleSoft PeopleTools Remote Command Execution Vulnerability Synopsis: ISS X-Force has discovered a flaw in the PeopleSoft PeopleTools application framework. PeopleSoft enterprise software enables manageme...

CVE-2002-1252

The Application Messaging Gateway for PeopleTools 8.1x before 8.19, as used in various PeopleSoft products, allows remote attackers to read arbitrary files via certain XML External Entities XXE fields in an HTTP POST request that is processed by the SimpleFileHandler handler...