Cross site scripting

Cross-site scripting XSS vulnerability in the Admin portlet in Liferay Portal 4.3.6 allows remote authenticated users to inject arbitrary web script or HTML via the Shutdown message...

CVE-2008-0178

Cross-site scripting XSS vulnerability in the Enterprise Admin Session Monitoring component in Liferay Portal 4.3.6 allows remote authenticated users to inject arbitrary web script or HTML via the User-Agent HTTP header...

CVE-2008-0563

CVE-2008-0563 describes a cross-site request forgery in Liferay Portal 4.3.6, where the application uses the User-Agent header when composing Forgot Password HTML emails. This allows remote attackers to perform unspecified actions as unspecified authenticated users. The available documents consis...

CVE-2008-0181

The CVE-2008-0181 issue affects Liferay Portal 4.3.6, where the Admin portlet’s Shutdown message fails to validate input, enabling remote authenticated users to inject arbitrary script/HTML. The vulnerability is an XSS in the Shutdown message display. The Red Hat/NVD entries corroborate the same ...

CVE-2008-0178

Cross-site scripting XSS vulnerability in the Enterprise Admin Session Monitoring component in Liferay Portal 4.3.6 allows remote authenticated users to inject arbitrary web script or HTML via the User-Agent HTTP header...

CVE-2008-0179

CVE-2008-0179 affects Liferay Portal 4.3.6, where a cross-site scripting (XSS) vulnerability exists in the processing of the User-Agent HTTP header used when composing Forgot Password emails. An attacker could insert arbitrary HTML/script via the User-Agent header, impacting email content. Public...

CVE-2008-0178

Liferay Portal 4.3.6 is affected in the Enterprise Admin Session Monitoring component by a cross-site scripting (XSS) vulnerability that can be triggered through the User-Agent HTTP header. An authenticated user could inject arbitrary script/HTML, potentially executing within the administrator’s ...

CVE-2008-0563

Cross-site request forgery CSRF vulnerability in service/impl/UserLocalServiceImpl.java in Liferay Portal 4.3.6 allows remote attackers to perform unspecified actions as unspecified authenticated users via the User-Agent HTTP header, which is used when composing Forgot Password e-mail messages in...