$ cve CVE-2009-0496 JSON

CVE-2009-0496 EXPLOIT

4.3

MEDIUM · CVSS 2.0 · EPSS 4.3% (pctl 91)

Patch early

A public exploit exists.

Description

Multiple cross-site scripting (XSS) vulnerabilities in Ignite Realtime Openfire 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the (1) log parameter to (a) logviewer.jsp and (b) log.jsp; (2) search parameter to (c) group-summary.jsp; (3) username parameter to (d) user-properties.jsp; (4) logDir, (5) maxTotalSize, (6) maxFileSize, (7) maxDays, and (8) logTimeout parameters to (e) audit-policy.jsp; (9) propName parameter to (f) server-properties.jsp; and the (10) roomconfig_roomname and (11) roomconfig_roomdesc parameters to (g) muc-room-edit-form.jsp. NOTE: this can be leveraged for arbitrary code execution by using XSS to upload a malicious plugin.

Scoring

CVSS	4.3 (MEDIUM, v2.0)
Vector	AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS	4.35% — more likely to be exploited than 91% of all CVEs
Weakness	CWE-79
On CISA KEV	no
Public exploit	yes
Published	2009-02-10
Last modified	2026-06-16

Affected (1)

Vendor	Product
ignite realtime	openfire

Public exploits

Source	Title	Date
exploit-db	Openfire 3.6.2 - 'group-summary.jsp' Cross-Site Scripting	2009-01-08
exploit-db	Openfire 3.6.2 - 'user-properties.jsp' Cross-Site Scripting	2009-01-08
exploit-db	Openfire 3.6.2 - 'log.jsp' Cross-Site Scripting	2009-01-08

References

→ the Explorer · watch your stack · NVD