CVE

Id
30986  
CVE No.
CVE-2008-0869  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in BEA WebLogic Workshop 8.1 through SP6 and Workshop for WebLogic 9.0 through 10.0 allows remote attackers to inject arbitrary web script or HTML via a "framework defined request parameter" when using WebLogic Workshop or Apache Beehive NetUI framework with page flows.  
Phase
Assigned (20080220)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
329832 30986 CVE-2008-0869 BEA:BEA08-189.00  View
329833 30986 CVE-2008-0869 URL:http://dev2dev.bea.com/pub/advisory/263  View
329834 30986 CVE-2008-0869 VUPEN:ADV-2008-0611  View
329835 30986 CVE-2008-0869 URL:http://www.vupen.com/english/advisories/2008/0611  View
329836 30986 CVE-2008-0869 VUPEN:ADV-2008-0612  View
329837 30986 CVE-2008-0869 URL:http://www.vupen.com/english/advisories/2008/0612/references  View
329838 30986 CVE-2008-0869 SECTRACK:1019438  View
329839 30986 CVE-2008-0869 URL:http://www.securitytracker.com/id?1019438  View
329840 30986 CVE-2008-0869 SECUNIA:29041  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
48826 JVNDB-2008-004136 XOOPS 用の jlmZone Classifieds モジュールの index.php における SQL インジェクションの脆弱性 XOOPS 用の jlmZone Classifieds モジュールの index.php には、SQL インジェクションの脆弱性が存在します。 CVE-2008-0873 30986 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004136.html  View