Liferay Enterprise Portal 'User-Agent' HTTP Header Script Injection Vulnerability

Liferay Enterprise Portal 'User-Agent' HTTP Header Script Injection Vulnerability

References:

Liferay Homepage (Liferay)
Forgot password XSS vulnerability (Lifreay)
VU#888209 Liferay Portal Forgot Password User-Agent HTTP header XSS (US-CERT)

Privacy Statement
Copyright 2010, SecurityFocus