high7.5
CVE-2003-0950
PeopleSoft PeopleTools 8.1x, 8.2x, and 8.4x allows remote attackers to execute arbitrary commands by uploading a file to the IClient Servlet, guessing the insu…
Impact
PeopleSoft PeopleTools 8.1x, 8.2x, and 8.4x allows remote attackers to execute arbitrary commands by uploading a file to the IClient Servlet, guessing the insufficiently random (system time) name of the directory used to store the file, and directly requesting that file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Peoplesoft | Peopletools | Versions 8.4, 8.10, 8.11, 8.12, 8.13, 8.14 |