CVE

Id
49416  
CVE No.
CVE-2011-1504  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in Liferay Portal Community Edition (CE) 5.x and 6.x before 6.0.6 GA allows remote authenticated users to inject arbitrary web script or HTML via a blog title.  
Phase
Assigned (20110321)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
536391 49416 CVE-2011-1504 MLIST:[oss-security] 20110329 CVE requests : Liferay 6.0.6  View
536392 49416 CVE-2011-1504 URL:http://openwall.com/lists/oss-security/2011/03/29/1  View
536393 49416 CVE-2011-1504 MLIST:[oss-security] 20110408 Re: CVE requests : Liferay 6.0.6  View
536394 49416 CVE-2011-1504 URL:http://openwall.com/lists/oss-security/2011/04/08/5  View
536395 49416 CVE-2011-1504 MLIST:[oss-security] 20110411 Re: CVE requests : Liferay 6.0.6  View
536396 49416 CVE-2011-1504 URL:http://openwall.com/lists/oss-security/2011/04/11/9  View
536397 49416 CVE-2011-1504 MISC:http://issues.liferay.com/browse/LPS-12145  View
536398 49416 CVE-2011-1504 CONFIRM:http://issues.liferay.com/browse/LPS-11506  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
31997 JVNDB-2011-002237 ManageEngine ServiceDesk Plus の encryptPassword 関数における重要な情報を取得される脆弱性 ManageEngine ServiceDesk Plus (SDP) の Login.js 内にある encryptPassword 関数は、Cookie 内のパスワードの暗号化にシーザー暗号を使用するため、重要な情報を取得される脆弱性が存在します。 CVE-2011-1509 49416 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002237.html  View