CVE-2003-0950 Information

Description

PeopleSoft PeopleTools 8.1x 8.2x and 8.4x allows remote attackers to execute arbitrary commands by uploading a file to the IClient Servlet guessing the insufficiently random (system time) name of the directory used to store the file and directly requesting that file.

Reference

http://www.securityfocus.com/bid/9041 http://xforce.iss.net/xforce/alerts/id/157 https://exchange.xforce.ibmcloud.com/vulnerabilities/12805

Share on: