PeopleSoft XML unauthorized access

It's possible to access any webserver files by using XML External Entities. By using SchedulerTransfer servlett it's possible to write arbitrary files on server...

ISS Security Brief: PeopleSoft PeopleTools Remote Command Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security Brief March 10, 2003 PeopleSoft PeopleTools Remote Command Execution Vulnerability Synopsis: ISS X-Force has discovered a flaw in the PeopleSoft PeopleTools application framework. PeopleSoft enterprise software enables manageme...

ISS Security Brief: PeopleSoft XML External Entities Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security Brief January 20, 2003 PeopleSoft XML External Entities Vulnerability Synopsis: ISS X-Force has discovered a flaw in the PeopleSoft Application Messaging Gateway. PeopleSoft enterprise software enables the management of all...