← Database

CVE-2008-0181

MEDIUM CVSS: 4.3 Published: 2008-02-05 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in the Admin portlet in Liferay Portal 4.3.6 allows remote authenticated users to inject arbitrary web script or HTML via the Shutdown message.

Affected Platforms

Liferay Liferay Enterprise Portal

Weakness Type

CWE-79

References