45 matches found
CVE-2004-2599: Undefined Security Weakness
Multiple buffer overflows in Quake II server before R1Q2, as used in multiple products, allow local users to cause a denial of service application crash via the server console or rcon...
Bea Weblogic application server Server Console crossite scripting
Crossite scripting; no session cookie timeout is implemented...
CVE-2005-1747
Multiple cross-site scripting XSS vulnerabilities in BEA WebLogic Server and Express 8.1 through Service Pack 4, and 7.0 through Service Pack 6, allow remote attackers to inject arbitrary web script or HTML, and possibly gain administrative privileges, via the 1 jusername or 2 jpassword parameter...
CVE-2005-1747: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in BEA WebLogic Server and Express 8.1 through Service Pack 4, and 7.0 through Service Pack 6, allow remote attackers to inject arbitrary web script or HTML, and possibly gain administrative privileges, via the 1 jusername or 2 jpassword parameter...