1074 matches found
CVE-2010-0684
Cross-site scripting XSS vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote authenticated users to inject arbitrary web script or HTML via the JMSDestination parameter in a queue action...
CVE-2010-1244
Apache ActiveMQ contains a CSRF vulnerability in createDestination.action that affects releases prior to 5.3.1. An attacker could remotely hijack an authenticated user’s session to create queues via the JMSDestination parameter in a queue action. The issue is documented across multiple sources ty...
CVE-2010-1244: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote attackers to hijack the authentication of unspecified victims for requests that create queues via the JMSDestination parameter in a queue action...
CVE-2010-0684: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote authenticated users to inject arbitrary web script or HTML via the JMSDestination parameter in a queue action...
Apache ActiveMQ跨站脚本和跨站请求伪造漏洞
BUGTRAQ ID: 39119 CVE ID: CVE-2010-0684 Apache ActiveMQ是流行的消息传输和集成模式提供程序。 ActiveMQ没有正确地过滤提交给/createDestination.action页面的JMSDestination请求参数便将其直接注入到了可通过/queues.jsp等URL访问的HTML代码中，这可能导致跨站脚本攻击；此外Web控制台应用没有对请求执行有效性检查便允许用户通过 HTTP请求执行某些操作，如果用户受骗访问了恶意网页就会导致跨站请求伪造攻击。 0 Apache Group ActiveMQ 5.3 Apache Grou...
CVE-2010-0684: Apache ActiveMQ Persistent Cross-Site Scripting (XSS) Vulnerability
CVE-2010-0684: Apache ActiveMQ Persistent Cross-Site Scripting XSS Vulnerability ============================================================== Security Advisory 03.30.2010 I. BACKGROUND Apache ActiveMQ is the most popular and powerful open source messaging and Integration Patterns provider...
Apache ActiveMQ Web Console HTML注入漏洞
BUGTRAQ ID: 34552 CNCAN ID：CNCAN-2009041702 Apache ActiveMQ是一款开源消息总线，支持JMS1.1和J2EE 1.4规范的JMS Provider实现。 Apache ActiveMQ管理接口不正确过滤多个表单信息，远程攻击者可以利用漏洞获得敏感信息。 目前没有详细漏洞细节提供。 0 Apache ActiveMQ 5.2 目前没有详细解决方案提供： a href=http://activemq.apache.org/ target=blank rel=external...
DDIVRT-2009-23 Apache ActiveMQ Numerous Cross Site Scripting Issues
Title ----- DDIVRT-2009-23 Apache ActiveMQ Numerous Cross Site Scripting Issues Severity -------- Low Date Discovered --------------- February 23rd, 2009 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: David Marshall and r@b13$ Vulnerability Description...
CVE-2023-25778
This CVE ID is rejected as unused by its CNA and does not represent an active vulnerability entry.