Published: 22/05/2004 Updated: 11/07/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 435

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in index.jsp for Liferay prior to 2.2.0 release 10/1/2004 allow remote malicious users to inject arbitrary web script or HTML, as demonstrated using the message subject.

Vulnerable Product	Search on Vulmon	Subscribe to Product
liferay liferay enterprise portal 2.1.0
liferay liferay enterprise portal

source: wwwsecurityfocuscom/bid/10402/info It has been reported that Liferay Enterprise Portal is susceptible to multiple cross-site scripting and HTML injection vulnerabilities User-supplied data from many input fields is included in server generated content without appropriate validation/encoding This may allow for typical cross-site ...

CWE-79 http://www.securityfocus.com/bid/10402 http://www.osvdb.org/6346 http://secunia.com/advisories/11692 http://sourceforge.net/project/shownotes.php?release_id=252060 http://securitytracker.com/id?1010259 http://marc.info/?l=bugtraq&m=110141194202856&w=2 http://marc.info/?l=bugtraq&m=108526683823840&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/16232 https://nvd.nist.gov https://www.exploit-db.com/exploits/24139/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2004-2030

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect