CVE-2007-0410

Unspecified vulnerability in the thread management in BEA WebLogic 7.0 through 7.0 SP6, 8.1 through 8.1 SP5, 9.0, and 9.1, when T3 authentication is used, allows remote attackers to cause a denial of service thread and system hang via unspecified "sequences of events."...

CVE-2007-0410

BeA WebLogic vulnerability: Unspecified flaw in thread management when T3 authentication is used affects WebLogic 7.0–7.0 SP6, 8.1–8.1 SP5, 9.0, and 9.1. Remote attackers can trigger a denial of service (thread and system hang) via unspecified sequences of events. No concrete exploit details, imp...

CVE-2007-0410: Undefined Security Weakness

Unspecified vulnerability in the thread management in BEA WebLogic 7.0 through 7.0 SP6, 8.1 through 8.1 SP5, 9.0, and 9.1, when T3 authentication is used, allows remote attackers to cause a denial of service thread and system hang via unspecified "sequences of events."...

35mmslidegallery.txt

multiple Xss exploits in 35mmslidegallery V6 forum type : 35mmslidegallery V6 bug found by : black-code team : $!T3-D0WN type : Xss exploits : http://example.com/lumet/album/index.php?imgdir='alert10 http://example.comr/lumet/album/popup.php?w='alert10...

multiple Xss exploits in 35mmslidegallery V6

multiple Xss exploits in 35mmslidegallery V6 forum type : 35mmslidegallery V6 bug found by : black-code team : $!T3-D0WN type : Xss exploits : http://example.com/lumet/album/index.php?imgdir='scriptalert10/script http://example.comr/lumet/album/popup.php?w='scriptalert10/script...

CVE-2006-2471: Undefined Security Weakness

Multiple vulnerabilities in BEA WebLogic Server 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7 leak sensitive information to remote attackers, including 1 DNS and IP addresses to address to T3 clients, 2 internal sensitive information using GetIORServlet, 3 certain "server details" in...

CVE-2005-4765

BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier and 7.0 SP6 and earlier, when using the weblogic.Deployer command with the t3 protocol, does not use the secure t3s protocol even when an Administration port is enabled on the Administration server, which might allow remote attackers to...

CVE-2005-4765: Undefined Security Weakness

BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier and 7.0 SP6 and earlier, when using the weblogic.Deployer command with the t3 protocol, does not use the secure t3s protocol even when an Administration port is enabled on the Administration server, which might allow remote attackers to...

CVE-2005-4765

BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier and 7.0 SP6 and earlier, when using the weblogic.Deployer command with the t3 protocol, does not use the secure t3s protocol even when an Administration port is enabled on the Administration server, which might allow remote attackers to...

CVE-2003-1221

The CVE concerns BEA WebLogic Express and WebLogic Server versions 7.0–8.1 SP 1. In certain configurations, a request to use T3 over SSL (t3s) sent to the insecure T3 port could cause a non-SSL connection to be used for the communication, allowing session sniffing. The connected sources (NVD/CVE ...

CVE-2003-1221: Undefined Security Weakness

BEA WebLogic Express and Server 7.0 through 8.1 SP 1, under certain circumstances when a request to use T3 over SSL t3s is made to the insecure T3 port, may use a non-SSL connection for the communication, which could allow attackers to sniff sessions...

CVE-2003-1221

BEA WebLogic Express and Server 7.0 through 8.1 SP 1, under certain circumstances when a request to use T3 over SSL t3s is made to the insecure T3 port, may use a non-SSL connection for the communication, which could allow attackers to sniff sessions...