Citrix StoreFront Server - XML External Entity

Citrix StoreFront Server before 1903, 7.15 LTSR before CU4 3.12.4000, and 7.6 LTSR before CU8 3.0.8000 allows XXE attacks. id: CVE-2019-13608 info: name: Citrix StoreFront Server - XML External Entity author: daffainfo severity: high description: | Citrix StoreFront Server before 1903, 7.15 LTSR...

CVE-2019-13608

Citrix StoreFront Server before 1903, 7.15 LTSR before CU4 3.12.4000, and 7.6 LTSR before CU8 3.0.8000 allows XXE attacks...

CVE-2024-13608

The Track Logins WordPress plugin through 1.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks...

CVE-2024-13608

creationtimestamp| type| source ---|---|--- 2025-02-17 06:02:42+00:00| seen| https://infosec.exchange/users/cve/statuses/114017708444763523 2025-02-17 06:15:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lie3u4ltf42o 2025-02-17 08:10:59+00:00| seen|...

Citrix StoreFront Server XXE (CTX477616)

Citrix StoreFront Server before 1903, 7.15 LTSR before CU4 3.12.4000, and 7.6 LTSR before CU8 3.0.8000 allows XXE attacks. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc...

CVE-2020-13608

CVE-2020-13608 is rejected/not used; this CVE ID has been withdrawn by its CNA.

CVE-2020-13608

...

CVE-2019-13608

creationtimestamp| type| source ---|---|--- 2021-02-01 14:56:26+00:00| seen| MISP/40f8e511-0605-4f1c-8112-5fe43ed25af0 2021-11-08 08:58:17+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422 2021-11-20 09:53:52+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:24:21+00:00|...

Citrix StoreFront Server XML External Entity Injection (CVE-2019-13608)

An XML external entity injection vulnerability exists in Citrix StoreFront Server. A successful exploitation of this vulnerability could result in the disclosure of file contents from the target system...

CVE-2019-13608

Citrix StoreFront Server before 1903, 7.15 LTSR before CU4 3.12.4000, and 7.6 LTSR before CU8 3.0.8000 allows XXE attacks...

CVE-2019-13608

Citrix StoreFront Server is affected by CVE-2019-13608: XML External Entity (XXE) processing vulnerability present in StoreFront versions before 1903, 7.15 LTSR before CU4 (3.12.4000), and 7.6 LTSR before CU8 (3.0.8000). The issue enables XXE attacks, with potential impact including reading arbit...

CVE-2019-13608

Citrix StoreFront Server before 1903, 7.15 LTSR before CU4 3.12.4000, and 7.6 LTSR before CU8 3.0.8000 allows XXE attacks. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

CVE-2019-13608 - XML External Entity (XXE) Processing Vulnerability in Citrix StoreFront Server

Description of Problem An XML External Entity XXE processing vulnerability has been identified in Citrix StoreFront Server that could allow an unauthenticated attacker to retrieve potentially sensitive information from the server. This vulnerability has been assigned the following CVE number: •...

CVE-2018-13608

The CVE pertains to a smart contract for archercoin (Ethereum token). The mintToken function contains an integer overflow that enables the contract owner to set the balance of an arbitrary user to any value. This is the core issue described in multiple sources (NVD/NVD details, PRION, CVE records...