Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
psdoccgi.exe in PeopleSoft PeopleTools 8.4 through 8.43 allows remote attackers to cause a denial of service (application crash), possibly via the headername and footername arguments.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PeopleSoft PeopleTools psdoccgi.exe拒绝服务攻击漏洞
Vulnerability Description
PeopleSoft企业软件集成多个商务功能，包括人事、客户关系、供求关系、财务等管理。 PeopleSoft PeopleTools包含的搜索CGI脚本对用户提交参数缺少充分过滤，远程攻击者可以利用这个漏洞进行拒绝服务攻击。 psdoccgi.exe搜索CGI应用程序用于搜索PeopleBooks在线文档，应用程序接收外部输入两个参数，headername和footername，允许用户选择页头和页脚本内容返回给请求者，由于对此参数数据缺少充分过滤，攻击者提交非法参数可使应用程序停止响应。
CVSS Information
N/A
Vulnerability Type
N/A