CVE-2010-0684

Cross-site scripting (XSS) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote authenticated users to inject arbitrary web script or HTML via the JMSDestination parameter in a queue action.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:apache:activemq:*:*:*:*:*:*:*:*
cpe:2.3:a:apache:activemq:1.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:activemq:1.2:*:*:*:*:*:*:*
cpe:2.3:a:apache:activemq:1.3:*:*:*:*:*:*:*
cpe:2.3:a:apache:activemq:1.4:*:*:*:*:*:*:*
cpe:2.3:a:apache:activemq:1.5:*:*:*:*:*:*:*
cpe:2.3:a:apache:activemq:2.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:activemq:2.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:activemq:3.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:activemq:3.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:activemq:3.2:*:*:*:*:*:*:*
cpe:2.3:a:apache:activemq:3.2.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:activemq:3.2.2:*:*:*:*:*:*:*
cpe:2.3:a:apache:activemq:4.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:activemq:4.0:m4:*:*:*:*:*:*
cpe:2.3:a:apache:activemq:4.0:rc2:*:*:*:*:*:*
cpe:2.3:a:apache:activemq:4.0.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:activemq:4.0.2:*:*:*:*:*:*:*
cpe:2.3:a:apache:activemq:4.1.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:activemq:4.1.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:activemq:5.0.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:activemq:5.1.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:activemq:5.2.0:*:*:*:*:*:*:*

History

21 Nov 2024, 01:12

Type Values Removed Values Added
References () http://activemq.apache.org/activemq-531-release.html - Patch () http://activemq.apache.org/activemq-531-release.html - Patch
References () http://secunia.com/advisories/39223 - Vendor Advisory () http://secunia.com/advisories/39223 - Vendor Advisory
References () http://securitytracker.com/id?1023778 - Exploit () http://securitytracker.com/id?1023778 - Exploit
References () http://www.rajatswarup.com/CVE-2010-0684.txt - Exploit () http://www.rajatswarup.com/CVE-2010-0684.txt - Exploit
References () http://www.securityfocus.com/archive/1/510419/100/0/threaded - () http://www.securityfocus.com/archive/1/510419/100/0/threaded -
References () http://www.securityfocus.com/bid/39119 - Patch () http://www.securityfocus.com/bid/39119 - Patch
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/57397 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/57397 -
References () https://issues.apache.org/activemq/browse/AMQ-2613 - Exploit () https://issues.apache.org/activemq/browse/AMQ-2613 - Exploit
References () https://issues.apache.org/activemq/browse/AMQ-2625 - Exploit () https://issues.apache.org/activemq/browse/AMQ-2625 - Exploit

Information

Published : 2010-04-05 16:30

Updated : 2024-11-21 01:12


NVD link : CVE-2010-0684

Mitre link : CVE-2010-0684

CVE.ORG link : CVE-2010-0684


JSON object : View

Products Affected

apache

  • activemq
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')