CVE-2004-2435

Cross-site scripting XSS vulnerability in PeopleSoft Human Resources Management System HRMS 7.0, when "web enabled" using HTML Access, allows remote attackers to inject arbitrary web script or HTML via unspecified 1 debugging or 2 utility scripts...

[SA12674] PeopleSoft HRMS Page Manipulation and Identity Spoofing

TITLE: PeopleSoft HRMS Page Manipulation and Identity Spoofing SECUNIA ADVISORY ID: SA12674 VERIFY ADVISORY: http://secunia.com/advisories/12674/ CRITICAL: Moderately critical IMPACT: Spoofing, Manipulation of data WHERE: From remote SOFTWARE: PeopleSoft Human Resources Management System HRMS 7.x...

PeopleSoft HRMS session spoofing

No description provided...

CVE-2003-0627

psdoccgi.exe in PeopleSoft PeopleTools 8.4 through 8.43 allows remote attackers to cause a denial of service application crash, possibly via the headername and footername arguments...

CVE-2003-0628

PeopleSoft Gateway Administration servlet gateway.administration in PeopleTools 8.43 and earlier allows remote attackers to obtain the full pathnames for server-side include SSI files via an HTTP request with an invalid value...

CVE-2003-0629

Cross-site scripting XSS vulnerability in PeopleSoft IScript environment for PeopleTools 8.43 and earlier allows remote attackers to insert arbitrary web script via a certain HTTP request to IScript...

CVE-2003-0950

PeopleSoft PeopleTools 8.1x, 8.2x, and 8.4x allows remote attackers to execute arbitrary commands by uploading a file to the IClient Servlet, guessing the insufficiently random system time name of the directory used to store the file, and directly requesting that file...

CVE-2003-0628

PeopleSoft Gateway Administration servlet gateway.administration in PeopleTools 8.43 and earlier allows remote attackers to obtain the full pathnames for server-side include SSI files via an HTTP request with an invalid value...

CVE-2003-0628

This CVE affects the PeopleSoft Gateway Administration servlet (gateway.administration) in PeopleTools 8.43 and earlier. An attacker can disclose the full pathnames of server-side include (SSI) files by sending an HTTP request with an invalid value, a path-disclosure vulnerability impacting confi...

CVE-2003-0629

CVE-2003-0629 concerns the PeopleSoft IScript environment in PeopleTools 8.43 and earlier. The XSS vulnerability arises from how the IScript interface processes HTTP requests, allowing remote attackers to inject arbitrary web script via a crafted request. Impact can include theft of session data ...

CVE-2003-0629

Cross-site scripting XSS vulnerability in PeopleSoft IScript environment for PeopleTools 8.43 and earlier allows remote attackers to insert arbitrary web script via a certain HTTP request to IScript...

CVE-2003-0950

CVE-2003-0950 affects PeopleSoft PeopleTools 8.1x, 8.2x, and 8.4x. The issue allows remote attackers to execute arbitrary commands by uploading a file to the IClient Servlet, guessing the directory name (based on system time) used to store the file, and directly requesting that file. The underlyi...

CVE-2003-0950

PeopleSoft PeopleTools 8.1x, 8.2x, and 8.4x allows remote attackers to execute arbitrary commands by uploading a file to the IClient Servlet, guessing the insufficiently random system time name of the directory used to store the file, and directly requesting that file...

CVE-2003-0841

The grid option in PeopleSoft 8.42 stores temporary .xls files in guessable directories under the web document root, which allows remote attackers to steal search results by directly accessing the files via a URL request...

CVE-2003-0626

psdoccgi.exe in PeopleSoft PeopleTools 8.4 through 8.43 allows remote attackers to read arbitrary files via the 1 headername or 2 footername arguments...

ISS Security Brief: PeopleSoft IClient Servlet Remote Command Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security Brief November 12, 2003 PeopleSoft IClient Servlet Remote Command Execution Vulnerability Synopsis: ISS X-Force has discovered a flaw in a servlet that is part of the PeopleSoft PeopleTools application framework. PeopleSoft...

Corsaire Security Advisory: PeopleSoft IScript XSS issue

-- Corsaire Security Advisory -- Title: PeopleSoft IScript XSS issue Date: 04.07.03 Application: PeopleTools 8.20/8.43 and prior Environment: Various Author: Glyn Geoghegan [email protected] Audience: General distribution Reference: c030704-004 -- Scope -- The aim of this document is to...

Multiple peoplesoft bugs

No description provided...

Corsaire Security Advisory: PeopleSoft PeopleBooks Search CGI multiple argument issues

-- Corsaire Security Advisory -- Title: PeopleSoft PeopleBooks Search CGI multiple argument issues Date: 04.07.03 Application: PeopleTools 8.20/8.43 and prior Environment: Various Author: Martin O'Neal [email protected] Audience: General distribution Reference: c030704-010 -- Scope -- The...

Corsaire Security Advisory: PeopleSoft Gateway Administration servlet path disclosure issue

-- Corsaire Security Advisory -- Title: PeopleSoft Gateway Administration servlet path disclosure issue Date: 04.07.03 Application: PeopleTools 8.20/8.43 and prior Environment: Various Author: Martin O'Neal [email protected] Audience: General distribution Reference: c030704-003 -- Scope -...