EDB-7075
funktionalOpenfire Server 3.6.0a - Authentication Bypass / SQL Injection / Cross-Site Scripting
Exploit ansehen Quelle exploit_dbverifiziertTyp webappsAutor Andreas Kurtzveröffentlicht 2008-11-09Katalog exploit_db
01
ausgenutzte CVEs (4)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2008-6511US | medium5.8 | Exploit | ||
Open redirect vulnerability in login.jsp in Openfire 3.6.0a and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the url pa… | ||||
| CVE-2008-6510US | medium4.3 | Exploit | ||
Cross-site scripting (XSS) vulnerability in login.jsp in the Admin Console in Openfire 3.6.0a and earlier allows remote attackers to inject arbitrary web script or HTML via the url… | ||||
| CVE-2008-6509US | high7.5 | Exploit | ||
SQL injection vulnerability in CallLogDAO in SIP Plugin in Openfire 3.6.0a and earlier allows remote attackers to execute arbitrary SQL commands via the type parameter to sipark-lo… | ||||
| CVE-2008-6508US | high7.5 | Exploit | ||
Directory traversal vulnerability in the AuthCheck filter in the Admin Console in Openfire 3.6.0a and earlier allows remote attackers to bypass authentication and access the admin… | ||||
scry
Funktionierende Exploits wie dieser zielen auf über das Internet erreichbare Systeme. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan