CVE-2016-4334

Jive before 2016.3.1 has an open redirect from the external-link.jspa page...

CVE-2016-4334

CVE-2016-4334 affects Jive prior to 2016.3.1, which contains an open redirect vulnerability on the external-link.jspa page. The root cause is an open redirect in that page, enabling redirection to a potentially malicious site. The impact is limited to user redirection, with no data disclosure des...

PT-2017-8477

Name of the Vulnerable Software and Affected Versions Jive versions prior to 2016.3.1 Description The issue is related to an open redirect from the external-link.jspa page. Recommendations For versions prior to 2016.3.1, update to version 2016.3.1 or later to resolve the issue...

CVE-2016-4334: URL Redirection to Untrusted Site

Jive before 2016.3.1 has an open redirect from the external-link.jspa page...

Jive Forums Directory Traversal Vulnerability

Jive Forums is a recognized online community. A directory traversal vulnerability exists in Jive Forums version 5.5.25 and earlier. An attacker can exploit ... /... / / jump to access system files outside of the web directory...

Jive Forums 5.5.25 - Directory Traversal

Jive Forums 5.5.25 - Directory Traversal ''' JiveForums " print " Usage: %s http://localhost /jiveforums/" % sys.argv0 sys.exit payload = 'servlet/JiveServlet?attachImage=true&attachment=/.././.././.././.././.././.././.././../etc/./passwd%00&contentType=image%2Fpjpeg' print "+ Trying to request...

FastPath Webchat | Multiple Cross Site Scripting Vulnerabilities

OVERVIEW Fastpath WebChat is vulnerable to Cross Site Scripting. 2. BACKGROUND Fastpath WebChat is part of the Fastpath product. It provides a way for users to begin chatting with support agents using Fastpath. Fastpath is a plugin of OpenFire, a real time collaboration RTC server for instant...

Jive Software Openfire Jabber Server Authentication Bypass (CVE-2008-6508)

Openfire previously known as Wildfire Server is an open source Jabber/XMPP server written in Java. Jabber is an open instant messaging technology that is maintained by the community. Extensible Messaging and Presence Protocol XMPP is an open, XML-inspired protocol originally aimed at...

Jive Software Openfire Jabber Server SQL Injection (CVE-2008-6509)

Openfire previously known as Wildfire Server is an open source Jabber/XMPP server written in Java. Jabber is an open instant messaging technology that is maintained by the community. Extensible Messaging and Presence Protocol XMPP is an open, XML-inspired protocol originally aimed at...

ClearSpace Detection

The remote web server is running Jive ClearSpace, a social networking site letting users manage wikis, publish blog entries and discuss between each other. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid38183; scriptversion"1.8"; scriptnameenglish:"ClearSpace...

sunForumXSS.txt

Sun, in their amazing patheticness, have again allowed direct HTML to be written into their forum system. URL: http://forum.java.sun.com/forum.jspa?forumID=553 It works on only select forums, but due to severe incompetence from the administrators of the site, this issue will occur quit often. It ...