Sql injection

SQL injection vulnerability in login.asp in Citrix Application Gateway - Broadcast Server BCS before 6.1, as used by Avaya AG250 - Broadcast Server before 2.0 and possibly other products, allows remote attackers to execute arbitrary SQL commands via the txtUID parameter...

CVE-2008-5882

CVE-2008-5882 describes a SQL injection in login.asp of Citrix Application Gateway – Broadcast Server (BCS) before 6.1, used by Avaya AG250 – Broadcast Server before 2.0 and possibly other products. The vulnerability arises via the txtUID parameter and could allow remote execution of arbitrary SQ...

CVE-2008-5882

SQL injection vulnerability in login.asp in Citrix Application Gateway - Broadcast Server BCS before 6.1, as used by Avaya AG250 - Broadcast Server before 2.0 and possibly other products, allows remote attackers to execute arbitrary SQL commands via the txtUID parameter...

Citrix Broadcast Server login.asp页面SQL注入漏洞

BUGTRAQ ID: 32832 Citrix Broadcast Server是Citrix应用网关中的一个组件，能够以文本、图形和音频信息方式向IP电话交付诸如紧急情况、IT和天气报警等高优先级消息。 Citrix Broadcast Server的管理登录页面存在SQL注入漏洞，远程攻击者可以通过带有txtUID HTTP POST参数的恶意请求来利用这个漏洞非授权访问Web接口或从数据库获得数据。 Citrix Broadcast Server 6.0 厂商补丁： Citrix ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Citrix Broadcast Server SQL injection

login.asp SQL injection...

DDIVRT-2008-16 Citrix Broadcast Server 6.0 login.asp SQL Injection --- Update for BID 32832

Title ----- DDIVRT-2008-16 Citrix Broadcast Server 6.0 login.asp SQL Injection Severity -------- High Date Discovered --------------- October 14, 2008 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: Corey LeBleu and r@b13$ Vulnerability Description...

Design/Logic Flaw

dne2000.sys in Citrix Deterministic Network Enhancer DNE 2.21.7.233 through 3.21.7.17464, as used in 1 Cisco VPN Client, 2 Blue Coat WinProxy, and 3 SafeNet SoftRemote and HighAssurance Remote, allows local users to gain privileges via a crafted DNEIOCTL DeviceIoControl request to the \.\DNE...

CVE-2008-5121

dne2000.sys in Citrix Deterministic Network Enhancer DNE 2.21.7.233 through 3.21.7.17464, as used in 1 Cisco VPN Client, 2 Blue Coat WinProxy, and 3 SafeNet SoftRemote and HighAssurance Remote, allows local users to gain privileges via a crafted DNEIOCTL DeviceIoControl request to the \.\DNE...

CVE-2008-5121

CVE-2008-5121 affects dne2000.sys used by Citrix Deterministic Network Enhancer (DNE) versions 2.21.7.233 through 3.21.7.17464, which are deployed with Cisco VPN Client, Blue Coat WinProxy, and SafeNet SoftRemote/HighAssurance Remote. The vulnerability is a local privilege escalation via a crafte...

CVE-2008-5121

dne2000.sys in Citrix Deterministic Network Enhancer DNE 2.21.7.233 through 3.21.7.17464, as used in 1 Cisco VPN Client, 2 Blue Coat WinProxy, and 3 SafeNet SoftRemote and HighAssurance Remote, allows local users to gain privileges via a crafted DNEIOCTL DeviceIoControl request to the \.\DNE...

CVE-2008-5107

The installation process for Citrix Presentation Server 4.5 and Desktop Server 1.0, when MSI logging is enabled, stores database credentials in MSI log files, which allows local users to obtain these credentials by reading the log files...

Design/Logic Flaw

The installation process for Citrix Presentation Server 4.5 and Desktop Server 1.0, when MSI logging is enabled, stores database credentials in MSI log files, which allows local users to obtain these credentials by reading the log files...

CVE-2008-5107

The installation process for Citrix Presentation Server 4.5 and Desktop Server 1.0, when MSI logging is enabled, stores database credentials in MSI log files, which allows local users to obtain these credentials by reading the log files...

CVE-2008-5107

CVE-2008-5107 affects Citrix Presentation Server 4.5 and Citrix Desktop Server 1.0. When MSI logging is enabled, the installation process stores database credentials in MSI log files, allowing local users to read them and obtain credentials. Root cause described as the logging process exposing se...

KLA10112 OSI vulnerability in Citrix

An unspecified vulnerability was found in Citrix products. By exploiting this vulnerability malicious users can obtain information. This vulnerability can be exploited locally at a point related to MSI logging. Original advisories Citrix bulletin Related products Citrix-Presentation-Server CVE li...

Citrix Web接口安全绕过漏洞

BUGTRAQ ID: 31943 CNCAN ID：CNCAN-2008102902 Java Application Servers的Citrix web接口存在漏洞，可导致断开进程未能正确终止用户的WEB接口会话。这允许其他验证用户使用相同浏览器实例获得对已经存在WEB接口会话的未授权访问 此漏洞值影响WEB接口5.0和5.0.1，Java Application Servers的旧版本web接口和所有针对Microsoft IIS的WEB接口版本不受此漏洞影响。 Citrix Web Interface 5.0.1 Citrix Web Interface 5.0 Citrix...

KLA10115 SB vulnerability in Citrix Web Interface

An unspecified vulnerability was found in the Citrix Secure Gateway. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited from the network via a specially designed request. Original advisories Citrix bulletin Related products...

NetScaler web management XSS

The remote web server is prone to cross-site scripting attacks. Description : The remote Citrix NetScaler web management interface is susceptible to cross-site scripting attacks. OpenVAS Vulnerability Test $Id: netscalerwebxss.nasl 4489 2016-11-14 08:23:54Z teissa $ Description: NetScaler web...

Citrix NetScaler Web Management Login (HTTP)

The scanner successfully logged into the remote Citrix NetScaler web management interface using the supplied credentials and stored the authentication cookie for later use. SPDX-FileCopyrightText: 2008 nnposter Some text descriptions might be excerpted from a referenced sources, and are Copyright...

Citrix NetScaler Detection (HTTP)

HTTP based detection of Citrix NetScaler. SPDX-FileCopyrightText: 2008 nnposter SPDX-FileCopyrightText: New detection methods / pattern / code since 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...