Date: Thu, 16 Jul 2009 18:18:26 +0400
From: DSecRG <research@dsecrg.com.>
To: [email protected], [email protected],
Subject: =?windows-1251?Q?[DSECRG-09-031]_Oracle_BEA_Weblogic_10.3_Linked_=D5SS_vulnerability?=
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Virus-Scanned: antivirus-gw at tyumen.ru
Digital Security Research Group [DSecRG] Advisory #DSECRG-09-031
http://dsecrg.com/pages/vul/show.php?id=131
Application: Oracle BEA Weblogic 10
Versions Affected: Oracle BEA Weblogic 10
Vendor URL: http://oracle.com
Bugs: Linked XSS Vulnerability
Exploits: YES
Reported: 18.03.2009
Vendor response: 19.03.2009
Description: XSS in Search
Date of Public Advisory: 16.07.2009
Authors: Alexandr Polyakov
Digital Security Research Group [DSecRG] (research [at] dsec [dot] ru)
Description
***********
Luinked XSS Vulnerability found in Oracle BEA Weblogic Server version 10.3.
Details
*******
Vulnerabilities found in console-help.portal script of Weblogic Server.
Linked XSS found in /consolehelp/console-help.portal. Vulnerable parameter "searchQuery"
Example
*******
http://testserver.com:7011//consolehelp/console-help.portal?_nfpb=true&_pageLabel=ConsoleHelpSearchPage&searchQuery="><script>alert('DSECRG')</script>
Fix Information
***************
Information was published in CPU July 2009.
All customers can download CPU petches following instructions from:
http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpujul2009.html
Credits
*******
Oracle give a credits for Alexandr Polyakov from Digital Security Company in CPU July 2009.
http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpujul2009.html
Original Advisory
http://dsecrg.com/pages/vul/show.php?id=131
About
*****
Digital Security is one of the leading IT security companies in CEMEA, providing information security consulting, audit and penetration testing services, risk analysis and ISMS-related services and certification for ISO/IEC 27001:2005 and PCI DSS standards. Digital Security Research Group focuses on application and database security problems with vulnerability reports, advisories and whitepapers posted regularly on our website.
Contact: research [at] dsecrg [dot] com
http://www.dsecrg.com
Polyakov Alexandr
Chief Information Security Analyst
______________________
