How severe is CVE-2007-6173?

The severity of CVE-2007-6173 has not been assessed with CVSS v3.

CVE-2007-6173

Name: liferay_enterprise_portal
Author: liferay

NONE

Cross-site scripting (XSS) vulnerability in c/portal/login in Liferay Enterprise Portal 4.3.1 allows remote attackers to inject arbitrary web script or HTML via the emailAddress parameter in a Send Ne

Published: 11/30/2007Updated: 4/9/2025

Description

Cross-site scripting (XSS) vulnerability in c/portal/login in Liferay Enterprise Portal 4.3.1 allows remote attackers to inject arbitrary web script or HTML via the emailAddress parameter in a Send New Password action, a different vector than CVE-2007-6055. NOTE: some of these details are obtained from third party information.

AI AnalysisPowered by AI

Affected Products

liferayliferay_enterprise_portal

4.3.1

Description

AI AnalysisPowered by AI

Affected Products

Available Exploits (1)

Liferay Portal 4.3.1 - Forgot-Password Cross-Site Scripting

References