5468 matches found
CVE-2005-3971
Cross-site scripting XSS vulnerability in the login form in Citrix MetaFrame Secure Access Manager 2.0 through 2.2 and NFuse Elite 1.0 allows remote attackers to inject arbitrary web script or HTML via the username field...
CVE-2005-3971
Cross-site scripting XSS vulnerability in the login form in Citrix MetaFrame Secure Access Manager 2.0 through 2.2 and NFuse Elite 1.0 allows remote attackers to inject arbitrary web script or HTML via the username field...
CVE-2005-3971
CVE-2005-3971 affects Citrix MetaFrame Secure Access Manager 2.0–2.2 and NFuse Elite 1.0. It is a cross-site scripting (XSS) vulnerability in the login form that allows remote attackers to inject arbitrary web script or HTML via the username field. The connected sources document this vulnerabilit...
Citrix Published Applications Enumeration (UDP)
UDP based enumeration of Citrix published applications. SPDX-FileCopyrightText: 2002 John [email protected] Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Citrix Server Detection
A Citrix server is running on this machine. SPDX-FileCopyrightText: 2005 John [email protected] Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Citrix Web Interface XSS
The remote server is running a Citrix Web Interface server that is vulnerable to cross site scripting. SPDX-FileCopyrightText: 2003 Michael J. Richardson Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Citrix NFuse_Application parameter XSS
The remote Citrix NFuse contains a flaw that allows a remote cross site scripting attack. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
ctxpoliciesbypass.txt
DESCRIPTION: ============ Vulnerability in Presentation Server allow to user bypass citrix policy which is applied to client name. SOFTWARE: Citrix Metaframe Presentation Server 3.0 / 4.0 ========= INFO: ===== Citrix Presentation Server policy is used for admins to restrict the user environment a...
CVE-2005-3134
Citrix Metaframe Presentation Server 3.0 and 4.0 allows remote attackers to bypass policy restrictions by downloading the launch.ica file and changing the client device name ClientName...
CVE-2005-3134
Citrix Metaframe Presentation Server 3.0 and 4.0 allows remote attackers to bypass policy restrictions by downloading the launch.ica file and changing the client device name ClientName...
CVE-2005-3134
CVE-2005-3134 affects Citrix Metaframe Presentation Server 3.0 and 4.0. The issue allows remote attackers to bypass policy restrictions by downloading the launch.ica file and changing the ClientName, enabling partial impacts to confidentiality, integrity, and availability as per the CVSSv2 vector...
Citrix Metaframe Presentation Server bypassing policies
DESCRIPTION: ============ Vulnerability in Presentation Server allow to user bypass citrix policy which is applied to client name. SOFTWARE: Citrix Metaframe Presentation Server 3.0 / 4.0 ========= INFO: ===== Citrix Presentation Server policy is used for admins to restrict the user environment a...
Citrix Metaframe Presentation Server protection bypass
Restrictions policy is based upon paramters controlled by client...
CVE-2004-1902
CVE-2004-1902 affects Citrix MetaFrame Password Manager 2.0. When a central credential store is not configured, passwords entered immediately after the First Time User Wizards are not encrypted, allowing local users to access sensitive information. Impact: partial confidentiality loss for credent...
CVE-2003-1157
Cross-site scripting XSS vulnerability in login.asp in Citrix MetaFrame XP Server 1.0 allows remote attackers to inject arbitrary web script or HTML via the NFuseMessage parameter...
CVE-2004-1902
The Citrix MetaFrame Password Manager 2.0, when a central credential store is not configured, does not encrypt passwords entered immediately after executing the First Time User Wizards, which allows local users to gain sensitive information...
CVE-2003-1157
CVE-2003-1157 describes a cross-site scripting (XSS) vulnerability in the Citrix MetaFrame XP Server 1.0 Web Interface component, affecting the login.asp handling of the NFuse_Message parameter. Attackers can inject arbitrary web script or HTML via this parameter, potentially impacting users' bro...
CVE-2005-0821
Unknown vulnerability in Citrix MetaFrame Conferencing Manager 3.0 allows conference members to bypass organizer restrictions to control the keyboard and mouse...
CVE-2005-0822
Citrix Metaframe Password Manager 2.5 and earlier stores a password in cleartext although it is obfuscated when presented to a user, which allows users to view their secondary passwords even if it is not allowed by policy...