Unrated severityNVD Advisory· Published Nov 30, 2007· Updated Apr 23, 2026
CVE-2007-6173
CVE-2007-6173
Description
Cross-site scripting (XSS) vulnerability in c/portal/login in Liferay Enterprise Portal 4.3.1 allows remote attackers to inject arbitrary web script or HTML via the emailAddress parameter in a Send New Password action, a different vector than CVE-2007-6055. NOTE: some of these details are obtained from third party information.
Affected products
1- cpe:2.3:a:liferay:liferay_enterprise_portal:4.3.1:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
10- www.securityfocus.com/bid/26606nvdExploit
- secunia.com/advisories/27821nvdVendor Advisory
- osvdb.org/38891nvd
- secunia.com/advisories/34714nvd
- securityreason.com/securityalert/3404nvd
- www.securityfocus.com/archive/1/484286/100/0/threadednvd
- www.securitytracker.com/idnvd
- www.securitytracker.com/idnvd
- www.vupen.com/english/advisories/2007/4027nvd
- www.vupen.com/english/advisories/2009/1048nvd
News mentions
0No linked articles in our index yet.