Liferay Portal 4.3.1 - Forgot-Password Cross-Site Scripting | Gerki | Теневой Форум про Заработок и ИБ

Exploiter

Хакер

21 Дек 2022

EDB-ID: 30817

Проверка EDB

Пройдено

Автор: JOSHUA MORIN

Тип уязвимости: WEBAPPS

Платформа: PHP

CVE: cve-2007-6173

Дата публикации: 2007-11-27

HTML:

source: https://www.securityfocus.com/bid/26606/info

Liferay Portal is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Liferay Portal 4.3.1 is vulnerable; other versions may also be affected. 

"><script>alert(&#039;xss&#039;)</script>
<html><b>XSS</b></font></html>
"><iframe>

Источник: www.exploit-db.com

Поиск

Exploit Liferay Portal 4.3.1 - Forgot-Password Cross-Site Scripting

Exploiter

Похожие темы