Liferay Portal vulnerable to arbitrary command injection
Unspecified vulnerability in the XSL Content portlet in Liferay Portal Community Edition (CE) 5.x and 6.x before 6.0.6 GA, when Apache Tomcat is used, allows remote attackers to execute arbitrary commands via unknown vectors.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2011-1571US | medium6.8 | Exploit | ||
Unspecified vulnerability in the XSL Content portlet in Liferay Portal Community Edition (CE) 5.x and 6.x before 6.0.6 GA, when Apache Tomcat is used, allows remote attackers to ex… | ||||
02
references
External citations — patches, advisories, analysis.
- http://issues.liferay.com/browse/LPS-14726WEB
- http://issues.liferay.com/secure/ReleaseNote.jspa?version=10656&styleName=Html&projectId=10952WEB
- http://openwall.com/lists/oss-security/2011/03/29/1WEB
- http://openwall.com/lists/oss-security/2011/04/08/5WEB
- http://openwall.com/lists/oss-security/2011/04/11/9WEB
- https://github.com/liferay/liferay-portalPACKAGE
- https://github.com/liferay/liferay-portal/commit/55502ca16019e1ea1a581ee87f4f20cde638c825WEB
- https://nvd.nist.gov/vuln/detail/CVE-2011-1571ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan