Incomplete List of Disallowed Inputs

Overview Affected versions of this package are vulnerable to Incomplete List of Disallowed Inputs via improper handling of namespaced or prefixed script elements and case-sensitive matching of JavaScript URIs in the removeScripts plugin. An attacker can execute arbitrary scripts in the context of...

[SA12674] PeopleSoft HRMS Page Manipulation and Identity Spoofing

TITLE: PeopleSoft HRMS Page Manipulation and Identity Spoofing SECUNIA ADVISORY ID: SA12674 VERIFY ADVISORY: http://secunia.com/advisories/12674/ CRITICAL: Moderately critical IMPACT: Spoofing, Manipulation of data WHERE: From remote SOFTWARE: PeopleSoft Human Resources Management System HRMS 7.x...