CVE-2011-1571
Liferay Portal CE <6.0.6 - RCE
Title source: llmDescription
Unspecified vulnerability in the XSL Content portlet in Liferay Portal Community Edition (CE) 5.x and 6.x before 6.0.6 GA, when Apache Tomcat is used, allows remote attackers to execute arbitrary commands via unknown vectors.
Exploits (2)
exploitdb
WORKING POC
by Spencer McIntyre · rubywebappsmultiple
https://www.exploit-db.com/exploits/18715
References (5)
Scores
EPSS
0.0740
EPSS Percentile
91.6%
Classification
Status
draft
Affected Products (2)
liferay/liferay_portal
< 5.1.2
com.liferay.portal/portal-service
< 6.0.6-gaMaven
Timeline
Published
May 07, 2011
Tracked Since
Feb 18, 2026