CVE-2008-0181

  • Last update: Apr 13, 2023

Description

Cross-site scripting (XSS) vulnerability in the Admin portlet in Liferay Portal 4.3.6 allows remote authenticated users to inject arbitrary web script or HTML via the Shutdown message.

Software From Fixed in
liferay / liferay_enterprise_portal 4.3.6 4.3.6.x

Details

    • Severity: Low
  • CVE: CVE-2008-0181
  • Published: Feb 5, 2008
  • Updated: Apr 13, 2023
  • Exploit:

CVSS v2

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs

OWASP TOP 10