CVE-2005-4876: XSS
Published Dec 31, 2005
·Updated
Cross-site scripting (XSS) vulnerability in the login form (login.jsp) of the admin console in Openfire (formerly Wildfire) 2.2.2, and possibly other versions before 2.3.0 Beta 2, allows remote attackers to inject arbitrary web script or HTML via the username parameter, a different vulnerability than CVE-2005-4877.
Affected Software
1 affected component
Ignite Realtime Openfire=2.2.2
Event History
Dec 31, 2005
CVE Published
05:00 AM
Aug 15, 2008
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-4876?
CVE-2005-4876 is classified as a medium severity cross-site scripting (XSS) vulnerability.
2
How do I fix CVE-2005-4876?
To fix CVE-2005-4876, upgrade Openfire to version 2.3.0 Beta 2 or later.
3
What software versions are affected by CVE-2005-4876?
CVE-2005-4876 affects Openfire versions prior to 2.3.0 Beta 2, specifically 2.2.2.
4
What type of attack does CVE-2005-4876 allow?
CVE-2005-4876 allows remote attackers to inject arbitrary web script or HTML into the login form.
5
Where is CVE-2005-4876 found in the Openfire application?
CVE-2005-4876 is found in the login form located in login.jsp of the admin console.