CVE-2007-6173

NONE

Cross-site scripting (XSS) vulnerability in c/portal/login in Liferay Enterprise Portal 4.3.1 allows remote attackers to inject arbitrary web script or HTML via the emailAddress parameter in a Send Ne

게시됨: 11/30/2007업데이트됨: 4/9/2025
NVD에서 보기MITRE에서 보기

설명

Cross-site scripting (XSS) vulnerability in c/portal/login in Liferay Enterprise Portal 4.3.1 allows remote attackers to inject arbitrary web script or HTML via the emailAddress parameter in a Send New Password action, a different vector than CVE-2007-6055. NOTE: some of these details are obtained from third party information.

AI 분석AI 기반

영향받는 제품

liferayliferay_enterprise_portal
4.3.1

사용 가능한 익스플로잇 (1)

참조