CVE:CVE-2003-0629
CNNVD:CNNVD-200312-034
PeopleTools 8.43以及之前的版本中PeopleSoft Iscript环境存在跨站脚本攻击漏洞。远程攻击者借助Iscript的特定HTTP请求插入任意Web脚本。
solution:Upgrade peoplesoft peopletools to a higher version than 8.4,8.10,8.11,8.12,8.13,8.14,8.15,8.16,8.17,8.18,8.19,8.20,8.40,8.41,8.42,8.43,and avoid the version 8.4,8.10,8.11,8.12,8.13,8.14,8.15,8.16,8.17,8.18,8.19,8.20,8.40,8.41,8.42,8.43