Unrated severityNVD Advisory· Published Nov 30, 2007· Updated Jun 16, 2026
CVE-2007-6173
CVE-2007-6173
Description
Cross-site scripting (XSS) vulnerability in c/portal/login in Liferay Enterprise Portal 4.3.1 allows remote attackers to inject arbitrary web script or HTML via the emailAddress parameter in a Send New Password action, a different vector than CVE-2007-6055. NOTE: some of these details are obtained from third party information.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:liferay:liferay_enterprise_portal:4.3.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:liferay:liferay_enterprise_portal:4.3.1:*:*:*:*:*:*:*
- (no CPE)range: = 4.3.1
Patches
Vulnerability mechanics
References
10- www.securityfocus.com/bid/26606nvdExploit
- secunia.com/advisories/27821nvdVendor Advisory
- osvdb.org/38891nvd
- secunia.com/advisories/34714nvd
- securityreason.com/securityalert/3404nvd
- www.securityfocus.com/archive/1/484286/100/0/threadednvd
- www.securitytracker.com/idnvd
- www.securitytracker.com/idnvd
- www.vupen.com/english/advisories/2007/4027nvd
- www.vupen.com/english/advisories/2009/1048nvd
News mentions
0No linked articles in our index yet.