Unrated severityNVD Advisory· Published Nov 20, 2007· Updated Apr 23, 2026
CVE-2007-6055
CVE-2007-6055
Description
Cross-site scripting (XSS) vulnerability in c/portal/login in Liferay Portal 4.1.0 and 4.1.1 allows remote attackers to inject arbitrary web script or HTML via the login parameter. NOTE: this issue reportedly exists because of a regression that followed a fix at an unspecified earlier date.
Affected products
2Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
10- osvdb.org/38702nvd
- secunia.com/advisories/27537nvd
- secunia.com/advisories/34714nvd
- securityreason.com/securityalert/3379nvd
- www.procheckup.com/Vulnerability_PR07-02.phpnvd
- www.securityfocus.com/archive/1/483777/100/0/threadednvd
- www.securityfocus.com/bid/26470nvd
- www.securitytracker.com/idnvd
- www.vupen.com/english/advisories/2009/1048nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/38503nvd
News mentions
0No linked articles in our index yet.