GCVE-110-CERTCC-2008-326065

Advisory Published

Vulnetix · Advisory published January 10, 2008

Liferay Portal contains a cross-site scripting vulnerability in the handling of the User-Agent HTTP header, which can allow a remote, authenticated attacker to gain administrative access.

Download JSON Open in Console

Risk Scores

certcc-cam

impact15population6exploitation0widely_known11score_current5.67ease_of_exploitation16

certcc-vrda

d1_impact2d1_population2d1_direct_report1

Aliases

CVE-2008-0178

References

Liferay Portal Enterprise Admin User-Agent HTTP header XSS

advisory

Liferay Portal Enterprise Admin User-Agent HTTP header XSS

url

Liferay Portal Enterprise Admin User-Agent HTTP header XSS

url

Browse GCVE Records

73,053 records in the GCVE database · Updated July 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON