Unscored CVE-2008-0181 EUVD-2008-0193GHSA-x44x-w9hc-7q9v

Cross-site scripting (XSS) vulnerability in the Admin portlet in Liferay Portal 4.3.6 allows remote authenticated users to inject arbitrary…

Published Feb 4, 2008 · Updated Sep 16, 2024 · Assigned by certcc

Description

Cross-site scripting (XSS) vulnerability in the Admin portlet in Liferay Portal 4.3.6 allows remote authenticated users to inject arbitrary web script or HTML via the Shutdown message.

References

28742 third-party-advisory
VU#217825 third-party-advisory
http://support.liferay.com/browse/LEP-4739
27554 vdb-entry