CVE-2007-2975

The admin console in Ignite Realtime Openfire 3.3.0 and earlier (formerly Wildfire) does not properly specify a filter mapping in web.xml, which allows remote attackers to gain privileges and execute arbitrary code by accessing functionality that is exposed through DWR, as demonstrated using the downloader.

• CWE-264

• http://blogs.reucon.com/srt/2007/05/11/openfire_3_3_1_fixes_critical_security_issue.html
• http://secunia.com/advisories/25427Vendor Advisory
• http://www.igniterealtime.org/issues/browse/JM-1049Patch, Vendor Advisory
• http://www.osvdb.org/36713
• http://www.securityfocus.com/bid/24205Patch
• http://blogs.reucon.com/srt/2007/05/11/openfire_3_3_1_fixes_critical_security_issue.html
• http://secunia.com/advisories/25427Vendor Advisory
• http://www.igniterealtime.org/issues/browse/JM-1049Patch, Vendor Advisory
• http://www.osvdb.org/36713
• http://www.securityfocus.com/bid/24205Patch

Published

Jun 1, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-2969PHP remote file inclusion vulnerability in newsletter.php in…
• CVE-2007-2970Multiple cross-site scripting (XSS) vulnerabilities in cgi/b…
• CVE-2007-2971SQL injection vulnerability in getnewsitem.php in gCards 1.4…
• CVE-2007-2972The file parsing engine in Avira Antivir Antivirus before 7.…
• CVE-2007-2973Avira Antivir Antivirus before 7.03.00.09 allows remote atta…
• CVE-2007-2974Buffer overflow in the file parsing engine in Avira Antivir …
• CVE-2007-2976Centrinity FirstClass 8.3 and earlier, and Server and Intern…
• CVE-2007-2977Buffer overflow in the receive function in submit/submitcomm…
• CVE-2007-2978Session fixation vulnerability in eggblog 3.1.0 and earlier …
• CVE-2007-2979Techno Dreams Web Directory / Search Engine 2.0 stores sensi…
• CVE-2007-2980Heap-based buffer overflow in a certain ActiveX control in L…
• CVE-2007-2981Buffer overflow in a certain ActiveX control in LEAD Technol…