CVE-2015-7999

Multiple SQL injection vulnerabilities in the Administration Web UI servlets in Citrix Command Center before 5.1 Build 36.7 and 5.2 before Build 44.11 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-7999

CVE-2015-7999 describes multiple SQL injection vulnerabilities in Citrix Command Center’s Administration Web UI servlets, affecting 5.1 Build 36.7 and 5.2 Build 44.11 prior builds. The root cause is insufficient input handling during SQL statement construction, enabling remote authenticated users...

PT-2016-3846

Name of the Vulnerable Software and Affected Versions Citrix Command Center versions prior to 5.1 Build 36.7 Citrix Command Center versions prior to 5.2 Build 44.11 Description The issue allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors due to multiple SQ...

How to Reverse Image from a Virtual Disk to a Local Hard Disk with VMware ESX4

This article contains information about how to reverse an image from a virtual disk to a local hard disk with VMware ESX4. Background It is often necessary in a Provisioning Services environment to reverse an image to install a Citrix hotfix, change a driver, or do certain other tasks.To achieve...

CVE-2015-7999: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the Administration Web UI servlets in Citrix Command Center before 5.1 Build 36.7 and 5.2 before Build 44.11 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

How to make a session that spans multiple monitors with Linux Receiver

This article is intended for Citrix administrators and technical teams only.Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149for more information. This article explains how to make a session that spans multiple monitors with Linux Receiver...

Citrix XenMobile Server Cross-Site Scripting Vulnerability

Citrix XenMobile is a Mobile Device and Application Management Solution A cross-site scripting vulnerability exists in the Web User Interface of Citrix XenMobile Server versions 10.0, 10.1 prior to Rolling Patch 4, and 10.3 prior to Rolling Patch 1, which can be exploited by remote attackers to...

CVE-2016-2789

Cross-site scripting XSS vulnerability in the Web User Interface in Citrix XenMobile Server 10.0, 10.1 before Rolling Patch 4, and 10.3 before Rolling Patch 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-2789

Cross-site scripting XSS vulnerability in the Web User Interface in Citrix XenMobile Server 10.0, 10.1 before Rolling Patch 4, and 10.3 before Rolling Patch 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Web User Interface in Citrix XenMobile Server 10.0, 10.1 before Rolling Patch 4, and 10.3 before Rolling Patch 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-2789

CVE-2016-2789 is a cross-site scripting (XSS) vulnerability in the Web User Interface of Citrix XenMobile Server 10.x. The issue affects XenMobile Server 10.0, 10.1 (before Rolling Patch 4), and 10.3 (before Rolling Patch 1). An attacker could inject arbitrary web script or HTML via unspecified v...

CVE-2016-2789

Cross-site scripting XSS vulnerability in the Web User Interface in Citrix XenMobile Server 10.0, 10.1 before Rolling Patch 4, and 10.3 before Rolling Patch 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2016-5220

Name of the Vulnerable Software and Affected Versions Citrix XenMobile Server versions 10.0, 10.1 through 10.1 before Rolling Patch 4, 10.3 through 10.3 before Rolling Patch 1 Description A cross-site scripting XSS issue exists in the Web User Interface of Citrix XenMobile Server, allowing remote...

CVE-2016-2789: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Web User Interface in Citrix XenMobile Server 10.0, 10.1 before Rolling Patch 4, and 10.3 before Rolling Patch 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

XenMobile Cloud Self-Service Auto-Discovery Portal

This article details how to configure auto-discovery for device enrollment in XenMobile Cloud. Refer to Citrix documentation -Device Management...

Understanding and Configuring EPA Verbose Logging on Citrix Gateway

CLI Configuration Run the following command on NetScaler for PreAuth and PostAuth EPA logging: set vpn param –clientSecurityLog ON Note : For PreAuth and PostAuth logging, the vpn param MUST be used. If the clientSecurityLog is modified in a SessionAction whose Session Policy has a ClientSecurity...

Application Enumeration Fails When Connecting Through Windows App Receiver and NetScaler Gateway

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Application enumeration fails when connecting through Windows App Receiver and NetScaler Gateway...

Citrix XenMobile XSS Vulnerability (CTX207499)

Citrix XenMobile is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Citrix XenApp and XenDesktop Hardening Guidance

A Joint Whitepaper from Mandiant and Citrix Throughout the course of Mandiant’s Red Team and Incident Response engagements, we frequently identify a wide array of misconfigured technology solutions, including Citrix XenApp and XenDesktop. We often see attackers leveraging stolen credentials from...

Citrix Endpoint Management / XenMobile Detection (HTTP)

HTTP based detection of Citrix Endpoint Management formerly XenMobile. When HTTP credentials are given, this script logs into the Endpoint Management / XenMobile server to obtain the installed patch release information. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be...