Multiple Cross-Site Scripting Vulnerabilities in Novell Teaming Portal
CVE-2009-1294

Currently unrated

Key Information:

Vendor
Novell
Status
Teaming
Liferay Enterprise Portal
Vendor
CVE Published:
16 April 2009

Summary

The Novell Teaming portal version 1.0 through SP3 (1.0.3) and Liferay 4.3.0 are susceptible to multiple cross-site scripting (XSS) vulnerabilities. Attackers can manipulate web scripts or HTML content through the p_p_state and p_p_mode parameters, potentially leading to unauthorized access or data breaches. These vulnerabilities enable remote attackers to execute malicious scripts in the context of the user's session, compromising the integrity and security of the web application.

References

http://www.novell.com/support/php/search.do?cmd=displayKC...
x_refsource_CONFIRM
https://www.sec-consult.com/files/20090415-0-novell-teami...
x_refsource_MISC
http://www.vupen.com/english/advisories/2009/1048
vdb-entryx_refsource_VUPEN

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.