CVEvulnerability
CVE-2006-7233
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the login form (login.jsp) of the admin console in Openfire (formerly Wildfire) 2.6.0, and possibly other versions before 3.5.3, allows remote attackers to inject arbitrary web script or HTML via the url parameter.
Affected configurations
• ignite realtime openfire (<= 3.5.2)
• ignite realtime openfire 2.6.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/31483 Vendor Advisory
- http://www.igniterealtime.org/issues/browse/JM-430 www.igniterealtime.org
- http://www.igniterealtime.org/issues/browse/JM-629 www.igniterealtime.org
- http://www.osvdb.org/47448 www.osvdb.org
- http://www.securityfocus.com/bid/30696 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44459 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/31483 Vendor Advisory
- http://www.igniterealtime.org/issues/browse/JM-430 www.igniterealtime.org
- http://www.igniterealtime.org/issues/browse/JM-629 www.igniterealtime.org
- http://www.osvdb.org/47448 www.osvdb.org
- http://www.securityfocus.com/bid/30696 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44459 exchange.xforce.ibmcloud.com