CVE:CVE-2011-1570
CNNVD:CNNVD-201105-092
当Apache Tomcat启用时，Liferay Portal Community Edition (CE) 6.0.6 GA之前的6.x版本中存在跨站脚本攻击漏洞。远程认证用户可以借助消息标题注入任意web脚本或HTML。
solution:Upgrade liferay liferay_portal to a higher version than 6.0.5,and avoid the version [6.0.0,6.0.5]