Unscored CVE-2005-4877 EUVD-2005-4868GHSA-xgh4-3f7c-mx5r

Cross-site scripting (XSS) vulnerability in the login form (login.jsp) of the admin console in Openfire (formerly Wildfire) 2.3.0 Beta 2 al…

Published Aug 14, 2008 · Updated Aug 8, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in the login form (login.jsp) of the admin console in Openfire (formerly Wildfire) 2.3.0 Beta 2 allows remote attackers to inject arbitrary web script or HTML via Javascript events in the username parameter, a different vulnerability than CVE-2005-4876.

References

openfire-javascript-events-xss(44690) vdb-entry
http://www.igniterealtime.org/issues/browse/JM-430