Description
PeopleSoft PeopleTools 8.1x, 8.2x, and 8.4x allows remote attackers to execute arbitrary commands by uploading a file to the IClient Servlet, guessing the insufficiently random (system time) name of the directory used to store the file, and directly requesting that file.
References
- 20031112 IClient Servlet Remote Command Execution Vulnerability third-party-advisory
- peoplesoft-iclientservlet-file-upload(12805) vdb-entry
- 9041 vdb-entry