Changes for page Application_Liferay

Last modified by Nicolas Gregoire on 2012/04/19 14:05
From version Icon 17.1 Icon
edited by Nicolas Gregoire
on 2012/01/13 14:25
Change comment: There is no comment for this version
To version Icon 14.1 Icon
edited by Nicolas Gregoire
on 2012/01/13 14:16
Change comment: There is no comment for this version

Summary

Details

Icon Page properties
Tags
... ... @@ -1,1 +1,0 @@
1 -liferay|java|xalan-j|code execution|xee
Content
... ... @@ -12,7 +12,7 @@
12 12  
13 13  
14 14  
15 -Executing commands and reading the output (using the "xalanj-reading-stdout.xsl" script included on the [[Xalan-J>>Engine_XalanJ]] page) :
15 +Executing commands and reading the output (using the "xalanj-reading-stdout.xsl" script included on the [[Xalan-J>>Engine_Saxon]] page) :
16 16  
17 17  [[image:liferay-execute-commands-with-stdout.png||style="display: block; margin-left: auto; margin-right: auto"]]
18 18  
... ... @@ -24,5 +24,7 @@
24 24  
25 25  * CVE-2011-1502 : allows to read UTF-8 files and to list directories via a XEE (XML External Entity) attack
26 26  
27 +
27 27  Reading /etc/passwd using CVE-2011-1502 :
29 +
28 28  [[image:liferay-read-etc-passwd-via-xee.png||style="display: block; margin-left: auto; margin-right: auto"]]