EUVD-2017-9015

Malware in sbrugna...

CVE-2017-17868

In Liferay Portal 6.1.0, the tags section has XSS via a Public Render Parameter prp value, as demonstrated by prp564233524tag...

CVE-2017-17868

In Liferay Portal 6.1.0, the tags section has XSS via a Public Render Parameter prp value, as demonstrated by prp564233524tag...

CVE-2017-17868

In Liferay Portal 6.1.0, the tags section has XSS via a Public Render Parameter prp value, as demonstrated by prp564233524tag...

Design/Logic Flaw

In Liferay Portal 6.1.0, the tags section has XSS via a Public Render Parameter prp value, as demonstrated by prp564233524tag...

CVE-2017-17868: Improper Neutralization of Input During Web Page Generation

In Liferay Portal 6.1.0, the tags section has XSS via a Public Render Parameter prp value, as demonstrated by prp564233524tag...

Liferay Porta tags section cross-site scripting vulnerability

Liferay Portal is a J2EE-based portal solution from Liferay, Inc. The solution uses EJB as well as JMS and other technologies , and can be used as a Web publishing and sharing workspaces , enterprise collaboration platforms , social networks and so on. A cross-site scripting vulnerability exists ...

CVE-2017-17868

In Liferay Portal 6.1.0, the tags section has XSS via a Public Render Parameter prp value, as demonstrated by prp564233524tag...

CVE-2017-17868

In Liferay Portal 6.1.0, the tags section is vulnerable to cross-site scripting via a Public Render Parameter (p_r_p) value (example: p_r_p_564233524_tag). This is caused by improper sanitization of the p_r_p parameter, allowing arbitrary script to be injected through the parameter. The vulnerabi...

PT-2017-15057

Name of the Vulnerable Software and Affected Versions Liferay Portal version 6.1.0 Description The issue concerns a Cross-Site Scripting XSS vulnerability. It is related to the tags section and can be triggered via a Public Render Parameter p r p value. Specifically, the p r p 564233524 tag value...