EDB-38190

PoC

Openfire 3.10.2 - Privilege Escalation

view exploit source exploit_dbtype webappsauthor hyp3rlinxpublished 2015-09-15catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2015-7707US	medium6.5	6.03% (93rd)	Exploit	2015-10-05
Ignite Realtime Openfire 3.10.2 allows remote authenticated users to gain administrator access via the isadmin parameter to user-edit-form.jsp.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.