EUVD-2008-0873

Malware in sbrugna...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in BEA WebLogic Workshop allow remote attackers to inject arbitrary web script or HTML via an invalid action URI, which is not properly handled by NetUI page flows...

CVE-2008-0866

CVE-2008-0866 affects BEA WebLogic Workshop (via NetUI page flows) and is caused by cross-site scripting vulnerabilities where an invalid action URI is not properly handled, enabling injection of arbitrary script/HTML. The NVD entry documents the weakness and its CVSS v2 base score of 4.3 (Medium...

CVE-2008-0869

Cross-site scripting XSS vulnerability in BEA WebLogic Workshop 8.1 through SP6 and Workshop for WebLogic 9.0 through 10.0 allows remote attackers to inject arbitrary web script or HTML via a "framework defined request parameter" when using WebLogic Workshop or Apache Beehive NetUI framework with...

CVE-2008-0869

CVE-2008-0869 describes a cross-site scripting (XSS) vulnerability in BEA WebLogic Workshop 8.1 (SP6) and Workshop for WebLogic 9.0–10.0. The issue allows remote attackers to inject arbitrary web script/HTML via a "framework defined request parameter" when using WebLogic Workshop or Apache Beehiv...

CVE-2008-0866

Multiple cross-site scripting XSS vulnerabilities in BEA WebLogic Workshop allow remote attackers to inject arbitrary web script or HTML via an invalid action URI, which is not properly handled by NetUI page flows...