CVE

Id
43268  
CVE No.
CVE-2010-0684  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote authenticated users to inject arbitrary web script or HTML via the JMSDestination parameter in a queue action.  
Phase
Assigned (20100222)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
471416 43268 CVE-2010-0684 BUGTRAQ:20100330 CVE-2010-0684: Apache ActiveMQ Persistent Cross-Site Scripting (XSS) Vulnerability  View
471417 43268 CVE-2010-0684 URL:http://www.securityfocus.com/archive/1/archive/1/510419/100/0/threaded  View
471418 43268 CVE-2010-0684 MISC:http://www.rajatswarup.com/CVE-2010-0684.txt  View
471419 43268 CVE-2010-0684 CONFIRM:http://activemq.apache.org/activemq-531-release.html  View
471420 43268 CVE-2010-0684 CONFIRM:https://issues.apache.org/activemq/browse/AMQ-2613  View
471421 43268 CVE-2010-0684 CONFIRM:https://issues.apache.org/activemq/browse/AMQ-2625  View
471422 43268 CVE-2010-0684 BID:39119  View
471423 43268 CVE-2010-0684 URL:http://www.securityfocus.com/bid/39119  View
471424 43268 CVE-2010-0684 SECTRACK:1023778  View
471425 43268 CVE-2010-0684 URL:http://securitytracker.com/id?1023778  View
471426 43268 CVE-2010-0684 SECUNIA:39223  View
471427 43268 CVE-2010-0684 URL:http://secunia.com/advisories/39223  View
471428 43268 CVE-2010-0684 XF:activemq-createdestination-xss(57397)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
38734 JVNDB-2010-004519 Orbital Viewer におけるスタックベースのバッファオーバーフローの脆弱性 Orbital Viewer には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2010-0688 43268 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004519.html  View