Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

igniterealtime openfire 3.6.0a vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2

CVE-2008-6508

Directory traversal vulnerability in the AuthCheck filter in the Admin Console in Openfire 3.6.0a and previous versions allows remote malicious users to bypass authentication and access the admin interface via a .. (dot dot) in a URI that matches the Exclude-Strings list, as demo...
Igniterealtime Openfire 3.2.2Igniterealtime OpenfireIgniterealtime Openfire 3.0.0Igniterealtime Openfire 3.0.1Igniterealtime Openfire 3.2.1Igniterealtime Openfire 3.4.4Igniterealtime Openfire 3.1.0Igniterealtime Openfire 3.4.0Igniterealtime Openfire 3.6.0Igniterealtime Openfire 3.2.3Igniterealtime Openfire 3.4.5Igniterealtime Openfire 3.3.2Igniterealtime Openfire 3.2.0Igniterealtime Openfire 3.5.0Igniterealtime Openfire 3.4.3Igniterealtime Openfire 2.6.1Igniterealtime Openfire 2.6.0Igniterealtime Openfire 2.6.2Igniterealtime Openfire 3.1.1Igniterealtime Openfire 3.5.2Igniterealtime Openfire 3.3.3Igniterealtime Openfire 3.5.1
7.5
CVSSv2

CVE-2008-6509

SQL injection vulnerability in CallLogDAO in SIP Plugin in Openfire 3.6.0a and previous versions allows remote malicious users to execute arbitrary SQL commands via the type parameter to sipark-log-summary.jsp.
Igniterealtime Openfire 3.2.2Igniterealtime OpenfireIgniterealtime Openfire 3.0.0Igniterealtime Openfire 3.0.1Igniterealtime Openfire 3.2.1Igniterealtime Openfire 3.4.4Igniterealtime Openfire 3.1.0Igniterealtime Openfire 3.4.0Igniterealtime Openfire 3.6.0Igniterealtime Openfire 3.2.3Igniterealtime Openfire 3.4.5Igniterealtime Openfire 3.3.2Igniterealtime Openfire 3.2.0Igniterealtime Openfire 3.5.0Igniterealtime Openfire 3.4.3Igniterealtime Openfire 2.6.1Igniterealtime Openfire 2.6.0Igniterealtime Openfire 2.6.2Igniterealtime Openfire 3.1.1Igniterealtime Openfire 3.5.2Igniterealtime Openfire 3.3.3Igniterealtime Openfire 3.5.1
5.8
CVSSv2

CVE-2008-6511

Open redirect vulnerability in login.jsp in Openfire 3.6.0a and previous versions allows remote malicious users to redirect users to arbitrary web sites and conduct phishing attacks via the url parameter.
Igniterealtime Openfire 3.2.2Igniterealtime OpenfireIgniterealtime Openfire 3.0.0Igniterealtime Openfire 3.0.1Igniterealtime Openfire 3.2.1Igniterealtime Openfire 3.4.4Igniterealtime Openfire 3.1.0Igniterealtime Openfire 3.4.0Igniterealtime Openfire 3.6.0Igniterealtime Openfire 3.2.3Igniterealtime Openfire 3.4.5Igniterealtime Openfire 3.3.2Igniterealtime Openfire 3.2.0Igniterealtime Openfire 3.5.0Igniterealtime Openfire 3.4.3Igniterealtime Openfire 2.6.1Igniterealtime Openfire 2.6.0Igniterealtime Openfire 2.6.2Igniterealtime Openfire 3.1.1Igniterealtime Openfire 3.5.2Igniterealtime Openfire 3.3.3Igniterealtime Openfire 3.5.1
4.3
CVSSv2

CVE-2008-6510

Cross-site scripting (XSS) vulnerability in login.jsp in the Admin Console in Openfire 3.6.0a and previous versions allows remote malicious users to inject arbitrary web script or HTML via the url parameter.
Igniterealtime Openfire 3.2.2Igniterealtime OpenfireIgniterealtime Openfire 3.0.0Igniterealtime Openfire 3.0.1Igniterealtime Openfire 3.2.1Igniterealtime Openfire 3.4.4Igniterealtime Openfire 3.1.0Igniterealtime Openfire 3.4.0Igniterealtime Openfire 3.6.0Igniterealtime Openfire 3.2.3Igniterealtime Openfire 3.4.5Igniterealtime Openfire 3.3.2Igniterealtime Openfire 3.2.0Igniterealtime Openfire 3.5.0Igniterealtime Openfire 3.4.3Igniterealtime Openfire 2.6.1Igniterealtime Openfire 2.6.0Igniterealtime Openfire 2.6.2Igniterealtime Openfire 3.1.1Igniterealtime Openfire 3.5.2Igniterealtime Openfire 3.3.3Igniterealtime Openfire 3.5.1
4
CVSSv2

CVE-2009-1595

The jabber:iq:auth implementation in IQAuthHandler.java in Ignite Realtime Openfire prior to 3.6.4 allows remote authenticated users to change the passwords of arbitrary accounts via a modified username element in a passwd_change action.
Igniterealtime Openfire 3.2.2Igniterealtime OpenfireIgniterealtime Openfire 3.4.2Igniterealtime Openfire 3.0.0Igniterealtime Openfire 3.0.1Igniterealtime Openfire 3.2.1Igniterealtime Openfire 3.4.4Igniterealtime Openfire 3.1.0Igniterealtime Openfire 3.4.0Igniterealtime Openfire 3.6.0Igniterealtime Openfire 3.2.3Igniterealtime Openfire 3.4.5Igniterealtime Openfire 3.3.2Igniterealtime Openfire 3.2.0Igniterealtime Openfire 3.5.0Igniterealtime Openfire 3.4.3Igniterealtime Openfire 2.6.1Igniterealtime Openfire 3.6.1Igniterealtime Openfire 3.6.0aIgniterealtime Openfire 3.6.2Igniterealtime Openfire 2.6.0Igniterealtime Openfire 2.6.2
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3080log injectionCVE-2024-6041CVE-2024-37661XML external entityCVE-2024-0845privilege escalationCVE-2023-37057CVE-2024-27801
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook