CVE-2008-6510

Cross-site scripting (XSS) vulnerability in login.jsp in the Admin Console in Openfire 3.6.0a and earlier allows remote attackers to inject arbitrary web script or HTML via the url parameter.

Published: Mar 23, 2009
Updated: Apr 13, 2023
CVE: CVE-2008-6510
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 4.3
AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs:

CWE-79

OWASP TOP 10:

A7 - Cross-Site Scripting (XSS)

Affected Software
References

Software	From	Fixed in
igniterealtime / openfire	3.2.2	3.2.2.x
igniterealtime / openfire	-	3.6.0a.x
igniterealtime / openfire	3.0.0	3.0.0.x
igniterealtime / openfire	3.0.1	3.0.1.x
igniterealtime / openfire	3.2.1	3.2.1.x
igniterealtime / openfire	3.4.4	3.4.4.x
igniterealtime / openfire	3.1.0	3.1.0.x
igniterealtime / openfire	3.4.0	3.4.0.x
igniterealtime / openfire	3.6.0	3.6.0.x
igniterealtime / openfire	3.2.3	3.2.3.x
igniterealtime / openfire	3.4.5	3.4.5.x
igniterealtime / openfire	3.3.2	3.3.2.x
igniterealtime / openfire	3.2.0	3.2.0.x
igniterealtime / openfire	3.5.0	3.5.0.x
igniterealtime / openfire	3.4.3	3.4.3.x
igniterealtime / openfire	2.6.1	2.6.1.x
igniterealtime / openfire	2.6.0	2.6.0.x
igniterealtime / openfire	2.6.2	2.6.2.x
igniterealtime / openfire	3.1.1	3.1.1.x
igniterealtime / openfire	3.5.2	3.5.2.x
igniterealtime / openfire	3.3.3	3.3.3.x
igniterealtime / openfire	3.5.1	3.5.1.x
igniterealtime / openfire	3.2.4	3.2.4.x
igniterealtime / openfire	3.3.0	3.3.0.x
igniterealtime / openfire	3.4.1	3.4.1.x

Vulnerability Database

290,301

CVE-2008-6510