CVE-2009-1294

概要

参考情報

• secunia.com/advisories/34714
• novell.com/support/php/search.do · Patch
• securityfocus.com/archive/1/502704/100/0/threaded
• securityfocus.com/bid/34531 · Exploit
• securitytracker.com/id
• vupen.com/english/advisories/2009/1048
• sec-consult.com/files/20090415-0-novell-teaming.txt · Exploit

liferay enterprise portal のその他の脆弱性

• CVE-2008-0563中 4.3Cross-site request forgery (CSRF) vulnerability in service/impl/UserLocalServiceImpl.java in Liferay Portal 4.3.6 allows remote attackers to…
• CVE-2008-0182中 4.3Cross-site request forgery (CSRF) vulnerability in the Admin portlet in Liferay Portal before 4.4.0 allows remote authenticated users to per…
• CVE-2008-0181中 4.3Cross-site scripting (XSS) vulnerability in the Admin portlet in Liferay Portal 4.3.6 allows remote authenticated users to inject arbitrary …
• CVE-2008-0180中 4.3Cross-site scripting (XSS) vulnerability in themes/_unstyled/templates/init.vm in Liferay Portal 4.3.6 allows remote authenticated users to …
• CVE-2008-0179低 2.6Cross-site scripting (XSS) vulnerability in service/impl/UserLocalServiceImpl.java in Liferay Portal 4.3.6 allows remote attackers to inject…