• Liferay TunnelServlet is vulnerable to deserialization attacks and, due to incorrect configuration, is accessible to an attacker (by default, it is restricted to localhost only). Depending on exact version of Liferay Portal, an attacker could exploit this vulnerability using specially-crafted serialized data to execute arbitrary code on the system or to perform denial of service attack.

• Restrict access to the vulnerable endpoints.

• • TRA-2017-01
  • LPE-15538

• 

• CWE-502

• Code Execution

• WordPress 2.1.1 Command Execution Backdoor Vulnerability (2.1.1 - 2.1.1)
• Apache Tomcat Remote Code Execution Vulnerability
• Invision Power Board version 3.3.4 unserialize PHP code execution
• WordPress Plugin W3 Total Cache PHP Code Injection (0.9.2.8)
• Horde/IMP Plesk webmail exploit