5.8
CVSSv2

CVE-2008-6511

Published: 23/03/2009 Updated: 11/10/2018
CVSS v2 Base Score: 5.8 | Impact Score: 4.9 | Exploitability Score: 8.6
VMScore: 585
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:P

Vulnerability Summary

Open redirect vulnerability in login.jsp in Openfire 3.6.0a and previous versions allows remote malicious users to redirect users to arbitrary web sites and conduct phishing attacks via the url parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

igniterealtime openfire 3.0.1

igniterealtime openfire 3.1.0

igniterealtime openfire 3.3.0

igniterealtime openfire 3.3.2

igniterealtime openfire 2.6.1

igniterealtime openfire 2.6.0

igniterealtime openfire 3.2.1

igniterealtime openfire 3.2.2

igniterealtime openfire 3.4.3

igniterealtime openfire 3.4.4

igniterealtime openfire 2.6.2

igniterealtime openfire 3.0.0

igniterealtime openfire 3.2.3

igniterealtime openfire 3.2.4

igniterealtime openfire 3.4.5

igniterealtime openfire 3.3.3

igniterealtime openfire 3.5.1

igniterealtime openfire 3.5.2

igniterealtime openfire 3.5.0

igniterealtime openfire 3.1.1

igniterealtime openfire 3.2.0

igniterealtime openfire 3.4.0

igniterealtime openfire 3.4.1

igniterealtime openfire 3.6.0

igniterealtime openfire

Exploits

Advisory: Openfire Server Multiple Vulnerabilities Advisory ID: AKADV2008-001 Release Date: 2008/11/07 Revision: 10 Last Modified: 2008/11/07 Date Reported: 2008/05/17 Author: Andreas Kurtz (mail at andreas-kurtzde) Affected Software: Openfire Server <= 36 ...