CVE-2008-0180
Published Feb 5, 2008
Last updated 16 years ago
Overview
- Description
- Cross-site scripting (XSS) vulnerability in themes/_unstyled/templates/init.vm in Liferay Portal 4.3.6 allows remote authenticated users to inject arbitrary web script or HTML via the Greeting field in a User Profile.
- Source
- cret@cert.org
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-79
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:liferay:liferay_enterprise_portal:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C94E89A8-FD42-4A27-A57E-D25700EC27E4"
},
{
"criteria": "cpe:2.3:a:liferay:liferay_enterprise_portal:1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E1561FBB-3E05-4DE9-8785-9D1C149B466C"
},
{
"criteria": "cpe:2.3:a:liferay:liferay_enterprise_portal:2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5CD9FA47-07E1-42D1-8B9A-F31119D2C4D9"
},
{
"criteria": "cpe:2.3:a:liferay:liferay_enterprise_portal:2.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A8340091-8C00-42AD-8709-866044D4A3B8"
},
{
"criteria": "cpe:2.3:a:liferay:liferay_enterprise_portal:2.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9C414660-1C6E-4371-800F-1C0FBFAEF5DD"
},
{
"criteria": "cpe:2.3:a:liferay:liferay_enterprise_portal:2.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "266E1E93-431D-4C04-8288-077837158A09"
},
{
"criteria": "cpe:2.3:a:liferay:liferay_enterprise_portal:3.6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7A512412-F8BA-4187-8E71-040C5641EF04"
},
{
"criteria": "cpe:2.3:a:liferay:liferay_enterprise_portal:4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B9265D3B-45C3-4D60-8B6E-E17C7C94CA9A"
},
{
"criteria": "cpe:2.3:a:liferay:liferay_enterprise_portal:4.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E2050C79-6FCD-4C05-86A2-F8AF2BBEB735"
},
{
"criteria": "cpe:2.3:a:liferay:liferay_enterprise_portal:4.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "569A80EE-0B9B-49BD-AEB0-8B07D8DA7CE3"
},
{
"criteria": "cpe:2.3:a:liferay:liferay_enterprise_portal:4.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "987419EB-E5FC-472A-AFFA-47D4D8799F61"
},
{
"criteria": "cpe:2.3:a:liferay:liferay_enterprise_portal:4.3.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C86D1BEF-DDC0-4622-8399-A23F7EFDE0F2"
}
],
"operator": "OR"
}
]
}
]