The BEA WebLogic Server Console suffers from a HTML injection vulnerability. Version 10.0 is affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/74377/ASPR-2009-01-27-1-PUB.txt
Source: https://packetstormsecurity.com/files/74377/ACROS-Security-Problem-Report-2009-01-27.1.html