Bugsalert.com
Security News about Viruses, Spyware,
Trojans, Malware, XSS attacks.

CVE-2007-6055 (portal)

BugsAlert Home > CVE-2007-6055 (portal)
 
 

Cross-site scripting (XSS) vulnerability in c/portal/login in Liferay Portal 4.1.0 and 4.1.1 allows remote attackers to inject arbitrary web script or HTML via the login parameter. NOTE: this issue reportedly exists because of a regression that followed a fix at an unspecified earlier date.




Original Source: http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-6055

Learn more about CVE-2007-6055 (portal)
 
Tags: cve-2007-6055 portal

Related Items

      CVE-2008-0654 (Azucar CMS)

      FrSIRT - Ourgame GLWorld "GLIEDown2.dll" Code Execution Vulnerabilities

      RedHat: Important: perl security update

      CVE-2008-5426 (kaspersky_internet_security_suite)

      CVE-2008-0825 (Caroline)

      Acritum Femitter Server FTP Server Denial of Service

      CVE-2008-0729 (Mobile Safari)

 

Pixel