PT-2013-4901

Name of the Vulnerable Software and Affected Versions Apache Roller versions prior to 5.0.2 Description The issue allows remote attackers to execute arbitrary OGNL expressions via certain parameters, such as the pageTitle parameter in the !getPageTitle sub-URL to roller-ui/login.rol. This is...