QwikSec

Security Database

CVE

CWE

Training

CVE-2009-1294

Published: Apr 16, 2009

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple cross-site scripting (XSS) vulnerabilities in web/guest/home in the Liferay 4.3.0 portal in Novell Teaming 1.0 through SP3 (1.0.3) allow remote attackers to inject arbitrary web script or HTML via the (1) p_p_state or (2) p_p_mode parameters.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7002999&sliceId=1&docTypeID=DT_TID_1_1&dialogID=33090060&stateId=1%200%2033084737

x_refsource_CONFIRM

https://www.sec-consult.com/files/20090415-0-novell-teaming.txt

x_refsource_MISC

vdb-entry

x_refsource_VUPEN

third-party-advisory

x_refsource_SECUNIA

20090415 SEC Consult SA-20090415-0 :: Multiple Vulnerabilities in Novell Teaming

mailing-list

x_refsource_BUGTRAQ

vdb-entry

x_refsource_SECTRACK

vdb-entry

x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.