Improper Neutralization of Input During Web Page Generation in Apache Axis2

TRUNG BÌNH 4.3CVE-2010-2103 · GHSA-23x8-j7hm-5xwf · Công bố 27/05/2010 · cập nhật 16/06/2026

Gói / sản phẩm	Phiên bản bị ảnh hưởng	Phiên bản đã vá
org.apache.axis2.wso2:axis2 Maven	`≥ 1.4.1, < 1.6.0`	`1.6.0`
axis2 apache	`= 1.4.1= 1.5.1`	Chưa có bản vá

Mô tả

Cross-site scripting (XSS) vulnerability in axis2-admin/axis2-admin/engagingglobally in the administration console in Apache Axis2/Java 1.4.1, 1.5.1, and possibly other versions, as used in SAP Business Objects 12, 3com IMC, and possibly other products, allows remote attackers to inject arbitrary web script or HTML via the modules parameter. NOTE: some of these details are obtained from third party information.

Mô tả của NVD

Tham khảo

nvd.nist.gov/vuln/detail/CVE-2010-2103 · ADVISORY
exchange.xforce.ibmcloud.com/vulnerabilities/58790 · WEB
kb.juniper.net/KB27373 · WEB
osvdb.org/64844 · WEB
spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdf · WEB
exploit-db.com/exploits/12689 · WEB
procheckup.com/vulnerability_manager/vulnerabilities/pr10-03 · WEB
secunia.com/advisories/39906 · Vendor Advisory
securityfocus.com/archive/1/511404/100/0/threaded
securityfocus.com/bid/40327 · Exploit
vupen.com/english/advisories/2010/1215 · Vendor Advisory

Bạn đang dùng một trong các sản phẩm này? Quét site để biết có đang lộ phiên bản có lỗ hổng không.

Quét site miễn phí