Portal CVE-2011-1504 Cross-Site Scripting Vulnerability
BID:73497
Info
Portal CVE-2011-1504 Cross-Site Scripting Vulnerability
| Bugtraq ID: | 73497 |
| Class: | Input Validation Error |
| CVE: |
CVE-2011-1504 |
| Remote: | Yes |
| Local: | No |
| Published: | May 07 2011 12:00AM |
| Updated: | May 07 2011 12:00AM |
| Credit: | Unknown |
| Vulnerable: |
Liferay Portal 6.0.5 Community Liferay Portal 6.0.4 Community Liferay Portal 6.0.3 Community Liferay Portal 6.0.2 Community Liferay Portal 6.0.1 Community Liferay Portal 6.0.0 Community Liferay Portal 5.2.3 Community Liferay Portal 5.2.2 Community Liferay Portal 5.2.1 Community Liferay Portal 5.2.0 Community Liferay Portal 5.1.2 Community Liferay Portal 5.1.1 Community Liferay Portal 5.1.0 Community Liferay Portal 5.0.1 Rc Community Liferay Portal 5.0.0 Rc Community |
| Not Vulnerable: | |
Discussion
Portal CVE-2011-1504 Cross-Site Scripting Vulnerability
Portal is prone to a cross-site scripting vulnerability. Cross-site scripting (XSS) vulnerability in Liferay Portal Community Edition (CE) 5.x and 6.x before 6.0.6 GA allows remote authenticated users to inject arbitrary web script or HTML via a blog title.
Portal is prone to a cross-site scripting vulnerability. Cross-site scripting (XSS) vulnerability in Liferay Portal Community Edition (CE) 5.x and 6.x before 6.0.6 GA allows remote authenticated users to inject arbitrary web script or HTML via a blog title.