2811 matches found
CVE-2010-0684: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote authenticated users to inject arbitrary web script or HTML via the JMSDestination parameter in a queue action...
Apache ActiveMQ跨站脚本和跨站请求伪造漏洞
BUGTRAQ ID: 39119 CVE ID: CVE-2010-0684 Apache ActiveMQ是流行的消息传输和集成模式提供程序。 ActiveMQ没有正确地过滤提交给/createDestination.action页面的JMSDestination请求参数便将其直接注入到了可通过/queues.jsp等URL访问的HTML代码中，这可能导致跨站脚本攻击；此外Web控制台应用没有对请求执行有效性检查便允许用户通过 HTTP请求执行某些操作，如果用户受骗访问了恶意网页就会导致跨站请求伪造攻击。 0 Apache Group ActiveMQ 5.3 Apache Grou...
CVE-2010-0684: Apache ActiveMQ Persistent Cross-Site Scripting (XSS) Vulnerability
CVE-2010-0684: Apache ActiveMQ Persistent Cross-Site Scripting XSS Vulnerability ============================================================== Security Advisory 03.30.2010 I. BACKGROUND Apache ActiveMQ is the most popular and powerful open source messaging and Integration Patterns provider...
Apache ActiveMQ Web Console HTML注入漏洞
BUGTRAQ ID: 34552 CNCAN ID：CNCAN-2009041702 Apache ActiveMQ是一款开源消息总线，支持JMS1.1和J2EE 1.4规范的JMS Provider实现。 Apache ActiveMQ管理接口不正确过滤多个表单信息，远程攻击者可以利用漏洞获得敏感信息。 目前没有详细漏洞细节提供。 0 Apache ActiveMQ 5.2 目前没有详细解决方案提供： a href=http://activemq.apache.org/ target=blank rel=external...
DDIVRT-2009-23 Apache ActiveMQ Numerous Cross Site Scripting Issues
Title ----- DDIVRT-2009-23 Apache ActiveMQ Numerous Cross Site Scripting Issues Severity -------- Low Date Discovered --------------- February 23rd, 2009 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: David Marshall and r@b13$ Vulnerability Description...
CVE-2023-32631
This CVE ID has been rejected by its CNA as unused and does not represent an active vulnerability entry.
