2015-10-05 17:59:03 2017-07-01 03:29:23

Ignite Realtime Openfire 3.10.2 allows remote authenticated users to gain administrator access via the isadmin parameter to user-edit-form.jsp.