Unscored CVE-2003-0626 EUVD-2003-0620GHSA-94g5-hq49-m9c3

psdoccgi.exe in PeopleSoft PeopleTools 8.4 through 8.43 allows remote attackers to read arbitrary files via the (1) headername or (2) foote…

Published Apr 14, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

psdoccgi.exe in PeopleSoft PeopleTools 8.4 through 8.43 allows remote attackers to read arbitrary files via the (1) headername or (2) footername arguments.

References

20031103 Corsaire Security Advisory: PeopleSoft PeopleBooks Search CGI multiple argument issues mailing-list
ESB-2003.0786 third-party-advisory
20031113 Corsaire Security Advisory: PeopleSoft PeopleBooks Search CGI multiple argument issues mailing-list
9037 vdb-entry
10225 third-party-advisory
peoplesoft-searchcgi-directory-traversal(13754) vdb-entry