CVE-2008-6508

This Metasploit module exploits an authentication bypass vulnerability in Openfire's admin console to upload and execute a malicious plugin, achieving arbitrary Java code execution. It has been tested against Openfire 3.6.0a.

This advisory details multiple vulnerabilities in Openfire Server <= 3.6.0a, including authentication bypass, SQL injection, and XSS. It provides technical descriptions and proof-of-concept examples for each vulnerability.

This Metasploit module exploits an authentication bypass vulnerability in Openfire's admin console to upload and execute a malicious plugin, achieving arbitrary Java code execution. It targets Openfire versions up to 3.6.0a.