GCVE-110-CERTCC-2008-217825

Advisory Published

Vulnetix · Advisory published January 10, 2008

Liferay Portal Admin portlet fails to properly validate input to the shutdown message, which can allow a remote, authenticated attacker to inject script into the message displayed to all users when the server is being shut down.

Download JSON Open in Console

Risk Scores

certcc-cam

impact15population6exploitation0widely_known2score_current0.38475ease_of_exploitation19

certcc-vrda

d1_impact2d1_population2d1_direct_report1

Aliases

CVE-2008-0181

References

Liferay Portal Admin portlet Shutdown message XSS

advisory

Liferay Portal Admin portlet Shutdown message XSS

url

Liferay Portal Admin portlet Shutdown message XSS

url

Browse GCVE Records

72,337 records in the GCVE database · Updated July 14, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON