CVE-2009-3760

CVE-2009-3760 affects the Citrix XenCenterWeb XenServer Resource Kit sample code: a vulnerability in config/writeconfig.php where the pool1 parameter enables static code injection into include/config.ini.php, allowing remote attackers to inject arbitrary PHP code. Root cause is improper handling ...

CVE-2009-3757

CVE-2009-3757 affects the XenServer Resource Kit sample code in Citrix XenCenterWeb. The vulnerability is multiple cross-site scripting (XSS) flaws in the web UI, exploitable through user-controlled input in PHP scripts: config/edituser.php (username), console.php (location, sessionid, vmname), f...

PT-2009-6003 · Citrix · Citrix Xencenterweb

Name of the Vulnerable Software and Affected Versions: Citrix XenCenterWeb affected versions not specified Description: The issue concerns multiple cross-site request forgery CSRF vulnerabilities in sample code within the XenServer Resource Kit in Citrix XenCenterWeb. These vulnerabilities allow...

Citrix Licensing Service Detection

The remote host is running Citrix Licensing Service. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid40876; scriptversion"1.7"; scriptnameenglish:"Citrix Licensing Service Detection"; scriptsummaryenglish:"Checks for Citrix Licensing Service"; scriptsetattribute...

Citrix Password Manager Service Stored Secondary Credentials Disclosure

Citrix Password Manager Service is installed on the remote host. The version of Citrix Password Manager Service on the remote host is reportedly affected by an information disclosure vulnerability involving secondary credentials. C Tenable Network Security, Inc. include"compat.inc"; if descriptio...

Citrix Password Manager Agent Secondary Credentials Information Disclosure

Citrix Password Manager Agent is installed on the remote host. The version of Citrix Password Manager Agent on the remote host is reportedly affected by an information disclosure vulnerability involving secondary credentials. C Tenable Network Security, Inc. include"compat.inc"; if description...

Citrix License Server Licensing Management Console Unspecified Issue

Citrix License Server is installed on the remote host. The version of Citrix License Server on the remote host is reportedly affected by a security vulnerability involving the Licensing Management Console. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid40614;...

Update Protection against Citrix XenCenterWeb Cross Site Scripting Vulnerabilities

Citrix XenCenterWeb is a web interface for Citrix XenServer environment management. Lack of sanitization in the username parameter may allow an attacker to access the Citrix XENCenter management console with javascript embedded in the username parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in Citrix Web Interface 4.6, 5.0, and 5.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-2452

Multiple unspecified vulnerabilities in Citrix Licensing 11.5 have unknown impact and attack vectors, related to "underlying components of the License Management Console."...

Design/Logic Flaw

Multiple unspecified vulnerabilities in Citrix Licensing 11.5 have unknown impact and attack vectors, related to "underlying components of the License Management Console."...

CVE-2009-2454

Cross-site scripting XSS vulnerability in Citrix Web Interface 4.6, 5.0, and 5.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Design/Logic Flaw

Citrix XenApp formerly Presentation Server 4.5 Hotfix Rollup Pack 3 does not apply an access policy when it is defined with the Access Gateway Advanced Edition filters, which allows attackers to bypass intended access restrictions via unknown vectors...

CVE-2009-2453

Citrix XenApp formerly Presentation Server 4.5 Hotfix Rollup Pack 3 does not apply an access policy when it is defined with the Access Gateway Advanced Edition filters, which allows attackers to bypass intended access restrictions via unknown vectors...

CVE-2009-2452

Technical details (affected products/versions, root cause, impact, and remediation) for CVE-2009-2452 are not provided in the supplied documents. Monitor for updates from vendors and security advisories.

CVE-2009-2454

Cross-site scripting XSS vulnerability in Citrix Web Interface 4.6, 5.0, and 5.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-2454

CVE-2009-2454 is an XSS vulnerability in Citrix Web Interface affecting version 4.6, 5.0 and 5.0.1, enabling remote attackers to inject arbitrary web script or HTML via unspecified vectors. The connected records confirm the vulnerability class and affected product line, with CVSS base score 4.3 (...

CVE-2009-2452

Multiple unspecified vulnerabilities in Citrix Licensing 11.5 have unknown impact and attack vectors, related to "underlying components of the License Management Console."...

CVE-2009-2453

CVE-2009-2453 affects Citrix XenApp (formerly Presentation Server) 4.5 Hotfix Rollup Pack 3. The issue is that an access policy is not applied when the policy is defined with the Access Gateway Advanced Edition filters, enabling bypass of intended access restrictions via unknown vectors. The conn...

CVE-2009-2453

Citrix XenApp formerly Presentation Server 4.5 Hotfix Rollup Pack 3 does not apply an access policy when it is defined with the Access Gateway Advanced Edition filters, which allows attackers to bypass intended access restrictions via unknown vectors...