EUVD-2015-7895

Malware in sbrugna...

EUVD-2015-2774

Malware in sbrugna...

CVE-2015-7999

Multiple SQL injection vulnerabilities in the Administration Web UI servlets in Citrix Command Center before 5.1 Build 36.7 and 5.2 before Build 44.11 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

Sql injection

Multiple SQL injection vulnerabilities in the Administration Web UI servlets in Citrix Command Center before 5.1 Build 36.7 and 5.2 before Build 44.11 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-7999

Multiple SQL injection vulnerabilities in the Administration Web UI servlets in Citrix Command Center before 5.1 Build 36.7 and 5.2 before Build 44.11 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-7999

CVE-2015-7999 describes multiple SQL injection vulnerabilities in Citrix Command Center’s Administration Web UI servlets, affecting 5.1 Build 36.7 and 5.2 Build 44.11 prior builds. The root cause is insufficient input handling during SQL statement construction, enabling remote authenticated users...

PT-2016-3846

Name of the Vulnerable Software and Affected Versions Citrix Command Center versions prior to 5.1 Build 36.7 Citrix Command Center versions prior to 5.2 Build 44.11 Description The issue allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors due to multiple SQ...

CVE-2015-7999: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the Administration Web UI servlets in Citrix Command Center before 5.1 Build 36.7 and 5.2 before Build 44.11 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

Citrix Systems Command Center SQL Injection Vulnerability

Citrix Systems Command Center is a suite of centralized management software for Citrix products from Citrix Systems USA. The software configures or monitors system health from a single console and provides device discovery, device log auditing, and device performance monitoring. A SQL injection...

Citrix Command Center Arbitrary Code Execution Vulnerability

Citrix Command Center provides centralized management of Branch Repeater products deployed across the network. Citrix Command Center fails to properly restrict access to Advent Java Management Extensions JMX, which allows remote attackers to exploit a vulnerability to execute arbitrary code via...

Citrix Command Center Information Disclosure Vulnerability

Citrix Command Center provides centralized management of Branch Repeater products deployed across the network. A security vulnerability exists in Citrix Command Center that allows a remote attacker to submit a conf/securitydbData.xml request to obtain sensitive information...

CVE-2015-2683

Citrix Command Center before 5.1 Build 35.4 and 5.2 before Build 42.7 does not properly restrict access to the Advent Java Management Extensions JMX Servlet, which allows remote attackers to execute arbitrary code via unspecified vectors to servlets/Jmxdynamic...

CVE-2015-2682

Citrix Command Center before 5.1 Build 35.4 and 5.2 before Build 42.7 allows remote attackers to obtain credentials via a direct request to conf/securitydbData.xml...

Design/Logic Flaw

Citrix Command Center before 5.1 Build 35.4 and 5.2 before Build 42.7 allows remote attackers to obtain credentials via a direct request to conf/securitydbData.xml...

CVE-2015-2683

Citrix Command Center before 5.1 Build 35.4 and 5.2 before Build 42.7 does not properly restrict access to the Advent Java Management Extensions JMX Servlet, which allows remote attackers to execute arbitrary code via unspecified vectors to servlets/Jmxdynamic...

CVE-2015-2682

Citrix Command Center before 5.1 Build 35.4 and 5.2 before Build 42.7 allows remote attackers to obtain credentials via a direct request to conf/securitydbData.xml...

PT-2015-5835

Name of the Vulnerable Software and Affected Versions Citrix Command Center versions prior to 5.1 Build 35.4 Citrix Command Center versions prior to 5.2 Build 42.7 Description The issue is related to improper access restriction to the Advent Java Management Extensions JMX Servlet. This allows...

PT-2015-5834

Name of the Vulnerable Software and Affected Versions Citrix Command Center versions prior to 5.1 Build 35.4 Citrix Command Center versions prior to 5.2 Build 42.7 Description The issue allows remote attackers to obtain credentials by making a direct request to the conf/securitydbData.xml file...

KLA10522 Multiple vulnerabilities in Citrix CC

Multiple serious vulnerabilities have been found in Citrix Controle Center. Malicious users can exploit these vulnerabilities to execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1. Improper access restrictions can be exploited remotely via an...

CVE-2015-2682: Undefined Security Weakness

Citrix Command Center before 5.1 Build 35.4 and 5.2 before Build 42.7 allows remote attackers to obtain credentials via a direct request to conf/securitydbData.xml...