EDB-7075

funktional

Openfire Server 3.6.0a - Authentication Bypass / SQL Injection / Cross-Site Scripting

Exploit ansehen Quelle exploit_dbverifiziertTyp webappsAutor Andreas Kurtzveröffentlicht 2008-11-09Katalog exploit_db

ausgenutzte CVEs (4)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2008-6511US	medium5.8	1.83% (79th)	Exploit	2009-03-23
Open redirect vulnerability in login.jsp in Openfire 3.6.0a and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the url pa…
CVE-2008-6510US	medium4.3	1.78% (78th)	Exploit	2009-03-23
Cross-site scripting (XSS) vulnerability in login.jsp in the Admin Console in Openfire 3.6.0a and earlier allows remote attackers to inject arbitrary web script or HTML via the url…
CVE-2008-6509US	high7.5	2.01% (81st)	Exploit	2009-03-23
SQL injection vulnerability in CallLogDAO in SIP Plugin in Openfire 3.6.0a and earlier allows remote attackers to execute arbitrary SQL commands via the type parameter to sipark-lo…
CVE-2008-6508US	high7.5	83.7% (100th)	Exploit	2009-03-23
Directory traversal vulnerability in the AuthCheck filter in the Admin Console in Openfire 3.6.0a and earlier allows remote attackers to bypass authentication and access the admin…

scry

Funktionierende Exploits wie dieser zielen auf über das Internet erreichbare Systeme. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.