Cross-Site Scripting Vulnerability in Liferay Portal by Liferay
CVE-2008-0180

Currently unrated

Key Information:

Vendor

Liferay
Status
Liferay Enterprise Portal
Vendor
CVE Published:
5 February 2008

What is CVE-2008-0180?

A cross-site scripting (XSS) vulnerability exists in the Liferay Portal, specifically in the themes/_unstyled/templates/init.vm file. This flaw allows remote authenticated users to inject malicious web scripts or HTML into the Greeting field of a User Profile, potentially compromising the integrity of the web application and exposing users to various security risks.

References

http://www.securityfocus.com/bid/27546
vdb-entryx_refsource_BID
http://secunia.com/advisories/28742
third-party-advisoryx_refsource_SECUNIA
http://www.kb.cert.org/vuls/id/732449
third-party-advisoryx_refsource_CERT-VN

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.