EIP-2026-118308

This exploit demonstrates a cross-site scripting (XSS) vulnerability in BEA WebLogic's administration console. The attacker injects malicious script code via a crafted HTTP request, which is then reflected in the server logs and executed when viewed by an administrator.