PeopleSoft盗取搜索结果漏洞-安全小百科

PeopleSoft盗取搜索结果漏洞

漏洞ID	1202318	漏洞类型	其他
发布时间	2003-11-17	更新时间	2003-11-17
CVE编号	CVE-2003-0841	CNNVD-ID	CNNVD-200311-054
漏洞平台	N/A	CVSS评分	5.0

|漏洞来源

https://www.securityfocus.com/bid/87740
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200311-054

|漏洞详情

PeopleSoft 8.42版本的网格选项将temporary .xls文件存储在web文档根目录下可猜测的目录中。远程攻击者借助URL请求通过直接访问文件盗取搜索结果。

|受影响的产品

PeopleSoft PeopleSoft 8.42

PeopleSoft PeopleSoft 8.41

PeopleSoft PeopleSoft 8.40

PeopleSoft PeopleSoft 8.19

PeopleSoft PeopleSoft 8.18

PeopleSoft PeopleSoft 8.17

|参考资料

来源:BUGTRAQ
名称:20031007PeopleSoftGridOptionVulnerability
链接:http://marc.theaimsgroup.com/?l=bugtraq&m;=106554919000847&w;=2

相关推荐: RARLAB FAR File Manager Buffer Overflow Vulnerability

RARLAB FAR File Manager Buffer Overflow Vulnerability 漏洞ID 1100851 漏洞类型 Boundary Condition Error 发布时间 2003-02-11 更新时间 2003-02-11 C…

文章版权归作者所有，未经允许请勿转载。

THE END