Exploitation Summary
EIP tracks 1 public exploit for CVE-2015-7707. PoCs published by hyp3rlinx.
AI-analyzed exploit summary This exploit demonstrates a privilege escalation vulnerability in Openfire 3.10.2 by manipulating the 'isadmin' parameter in a GET request to grant admin privileges to a regular user. The exploit can be executed remotely if the user is logged in, as no CSRF token is required.
Description
Ignite Realtime Openfire 3.10.2 allows remote authenticated users to gain administrator access via the isadmin parameter to user-edit-form.jsp.
Exploits (1)
This exploit demonstrates a privilege escalation vulnerability in Openfire 3.10.2 by manipulating the 'isadmin' parameter in a GET request to grant admin privileges to a regular user. The exploit can be executed remotely if the user is logged in, as no CSRF token is required.