Bea Weblogic application server Server Console crossite scripting updated since 25.05.2005
Published:		28.05.2005
Source:		BUGTRAQ
SecurityVulns ID:		4823
Type:		remote
Level:		5/10
Description:		Crossite scripting; no session cookie timeout is implemented.

Affected:

BEA : Weblogic 8.1

Original document		SHATTER, [AppSecInc Advisory BEA05-V0101] BEA WebLogic Administration Console login page cross-site scripting vulnerability (28.05.2005)
		SHATTER, [AppSecInc Advisory BEA05-V0100] BEA WebLogic Administration Console error page cross-site scripting vulnerability (28.05.2005)
		ACROS Security, ACROS Security: HTML Injection in BEA WebLogic Server Console (1) (25.05.2005)
		ACROS Security, ACROS Security: HTML Injection in BEA WebLogic Server Console (2) (25.05.2005)

Discuss:

Read or add your comments to this news (0 comments)