CVE-2005-4400: XSS
Cross-site scripting (XSS) vulnerability in downloads/portalent in Liferay Portal Enterprise 3.6.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) 77strutsaction, (2) ppmode, and (3) ppstate parameters.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-4400?
CVE-2005-4400 is considered a medium severity cross-site scripting (XSS) vulnerability.
How do I fix CVE-2005-4400?
To fix CVE-2005-4400, upgrade Liferay Portal Enterprise to version 3.6.2 or later where the vulnerability is addressed.
What impact does CVE-2005-4400 have on Liferay Portal Enterprise?
CVE-2005-4400 allows remote attackers to inject arbitrary web scripts or HTML, potentially compromising user data and session security.
Which versions of Liferay Portal Enterprise are affected by CVE-2005-4400?
CVE-2005-4400 affects Liferay Portal Enterprise versions 3.6.1 and earlier.
Is CVE-2005-4400 a common vulnerability?
CVE-2005-4400 is a known vulnerability in older versions of Liferay, which may still be present in legacy systems.