CVE

Id
29412  
CVE No.
CVE-2007-6055  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in c/portal/login in Liferay Portal 4.1.0 and 4.1.1 allows remote attackers to inject arbitrary web script or HTML via the login parameter. NOTE: this issue reportedly exists because of a regression that followed a fix at an unspecified earlier date.  
Phase
Assigned (20071120)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
309288 29412 CVE-2007-6055 BUGTRAQ:20071115 PR07-02: XSS on Liferay Portal Enterprise 4.1.1 login page ("login" parameter)  View
309289 29412 CVE-2007-6055 URL:http://www.securityfocus.com/archive/1/archive/1/483777/100/0/threaded  View
309290 29412 CVE-2007-6055 MISC:http://www.procheckup.com/Vulnerability_PR07-02.php  View
309291 29412 CVE-2007-6055 BID:26470  View
309292 29412 CVE-2007-6055 URL:http://www.securityfocus.com/bid/26470  View
309293 29412 CVE-2007-6055 OSVDB:38702  View
309294 29412 CVE-2007-6055 URL:http://osvdb.org/38702  View
309295 29412 CVE-2007-6055 SECTRACK:1022063  View
309296 29412 CVE-2007-6055 URL:http://www.securitytracker.com/id?1022063  View
309297 29412 CVE-2007-6055 SECUNIA:27537  View
309298 29412 CVE-2007-6055 URL:http://secunia.com/advisories/27537  View
309299 29412 CVE-2007-6055 SECUNIA:34714  View
309300 29412 CVE-2007-6055 URL:http://secunia.com/advisories/34714  View
309301 29412 CVE-2007-6055 SREASON:3379  View
309302 29412 CVE-2007-6055 URL:http://securityreason.com/securityalert/3379  View
309303 29412 CVE-2007-6055 VUPEN:ADV-2009-1048  View
309304 29412 CVE-2007-6055 URL:http://www.vupen.com/english/advisories/2009/1048  View
309305 29412 CVE-2007-6055 XF:liferay-portal-login-xss(38503)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
54222 JVNDB-2007-002914 datecomm Social Networking Script の index.php における PHP リモートファイルインクルージョンの脆弱性 datecomm Social Networking Script の index.php には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2007-6057 29412 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002914.html  View