EDB-51244

PoC

Liferay Portal 6.2.5 - Insecure Permissions

view exploit source exploit_dbtype webappsauthor Fu2x2000published 2023-04-05catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2021-33990UScritical9.8Exploit
Liferay Portal 6.2.5 allows Command=FileUpload&Type=File&CurrentFolder=/ requests when frmfolders.html exists. NOTE: The vendor disputes this issue because the exploit reference li…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan