BEA WebLogic 7.0/8.1 - Administration Console Cross-Site Scripting

QQ空间 新浪微博 微信 QQ facebook twitter
漏洞ID 1055355 漏洞类型
发布时间 2005-08-24 更新时间 2005-08-24
漏洞平台 Windows CVSS评分 N/A

BEA WebLogic administration console is prone to cross-site scripting attacks.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

1. Make a HTTP request containing XSS code to a target Web server

$ printf "GET /<script>alert(document.cookie)</script>GomoR HTTP/1.0\r\n\r\n" | nc 80

2. Login into the Administration console
3. Go to the menu 'Network configurations/servers/myserver/'
4. Click on 'View server log'
5. Search for the string GomoR and click on the BEA-id event.