3 matches found
Code injection
Ignite Realtime Openfire 3.10.2 allows remote authenticated users to gain administrator access via the isadmin parameter to user-edit-form.jsp...
6.5CVSS7AI score0.06029EPSS
SaveExploits3References5Affected Software1
CVE-2015-7707
Ignite Realtime Openfire 3.10.2 allows remote authenticated users to gain administrator access via the isadmin parameter to user-edit-form.jsp...
6.5CVSS0.06029EPSS
SaveExploits3References5
PT-2015-7588
Name of the Vulnerable Software and Affected Versions Ignite Realtime Openfire version 3.10.2 Description The issue allows remote authenticated users to gain administrator access. This is achieved by exploiting the isadmin parameter in the "user-edit-form.jsp" endpoint. Recommendations For Ignite...
6.5CVSS0.06029EPSS
SaveExploits3References6
20