Liferay 6.1 Default Configuration Compromise

[newsbot]

By utilizing the json webservices exposed in Liferay Portal version 6.1 you can register a new user with any role in the system, including the built in administrator role. Proof of concept included.

Weiterlesen... (http://packetstormsecurity.org/files/112057/liferay-config.tgz)