GCVE-110-CERTCC-2008-888209

Advisory Published

Vulnetix · Advisory published January 10, 2008

Liferay Portal contains a cross-site scripting vulnerability in the handling of the User-Agent HTTP header, which can allow a remote, authenticated attacker to inject content into "Forgot Password" emails.

Download JSON Open in Console

Risk Scores

certcc-cam

impact1population6exploitation0widely_known11score_current0.378ease_of_exploitation16

certcc-vrda

d1_impact2d1_population2d1_direct_report1

Aliases

CVE-2008-0179

References

Liferay Portal Forgot Password User-Agent HTTP header XSS

advisory

Liferay Portal Forgot Password User-Agent HTTP header XSS

url

Liferay Portal Forgot Password User-Agent HTTP header XSS

url

Browse GCVE Records

73,393 records in the GCVE database · Updated July 17, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON