CVE-2005-4400

CVE-2005-4400 is a documented cross-site scripting (XSS) vulnerability in Liferay Portal Enterprise (versions up to 3.6.1). The flaw affects the downloads/portal_ent component and can be exploited via the parameters _77_struts_action, p_p_mode, and p_p_state to inject arbitrary script/HTML. The i...