1717 matches found
CVE-2007-6193
CVE-2007-6193 concerns the Citrix NetScaler web management interface. The OpenVAS entries and the NVD record indicate that NetScaler 8.0 build 47.8 exposes the device’s primary IP address (and, per OpenVAS, software version) via the web management cookie, enabling information disclosure. The impa...
CVE-2007-6192
The web management interface in Citrix NetScaler 8.0 build 47.8 uses weak encryption XOR of unpadded data to store credentials within a cookie, which makes it easier for remote attackers to obtain cleartext credentials when a cookie is captured via a known-plaintext attack...
CVE-2007-6192
The CVE-2007-6192 entry describes an information disclosure vulnerability in the Citrix NetScaler Web Management Interface (NetScaler 8.0 build 47.8). The issue arises from using weak encryption to protect cookie contents by XORing sensitive values (including credentials) with a fixed key stream,...
Citrix NetScaler Web Management Cookie Weakness
Citrix NetScaler Web Management Cookie Weakness Product: Citrix NetScaler http://www.citrix.com/lang/English/ps2/index.asp Background: For most web application logins a user fills out an HTTP form, which sets up the user with a session cookie. The cookie content is merely a session ID, which allo...
Citrix NetScaler weak cryptography
Username/password are stored as a part of cookie with encryption XORing with reused key, making it's possible to discover parts of the password...
citrix-xss.txt
Citrix NetScaler Web Management XSS Product: Citrix NetScaler http://www.citrix.com/lang/English/ps2/index.asp Citrix NetScaler contains a cross-site scripting vulnerability in the web management interface. None of the parameter values of /ws/genericapicall.pl are sanitized before they get embedd...
Citrix NetScaler generic_api_call.pl跨站脚本执行漏洞
BUGTRAQ ID: 26491 Citrix NetScaler是很多企业和银行都在使用的应用交付系统。 Citrix NetScaler的Web管理界面实现上存在输入验证漏洞，远程攻击者可能利用此漏洞导致跨站脚本执行。 Citrix NetScaler的Web管理界面没有过滤/ws/genericapicall.pl的参数值便嵌入到了HTML输出中，如果用户提交了恶意请求的话就可以执行跨站脚本攻击，导致在浏览器会话中执行任意代码。 Citrix NetScaler 8.0 build 47.8 时解决方法： 在浏览其他站点时不要登录在NetScaler的Web管理界面上。 厂商补丁...
CVE-2007-6037
Cross-site scripting XSS vulnerability in ws/genericapicall.pl in Citrix NetScaler 8.0 build 47.8 allows remote attackers to inject arbitrary web script or HTML via the standalone parameter and other unspecified parameters...
Cross site scripting
Cross-site scripting XSS vulnerability in ws/genericapicall.pl in Citrix NetScaler 8.0 build 47.8 allows remote attackers to inject arbitrary web script or HTML via the standalone parameter and other unspecified parameters...
CVE-2007-6037
CVE-2007-6037 corresponds to a cross-site scripting (XSS) vulnerability in Citrix NetScaler 8.0 build 47.8, specifically affecting the web management interface via ws/generic_api_call.pl and the standalone parameter (and other unspecified params). OpenVAS entries describe the NetScaler Web Manage...
CVE-2007-6037
Cross-site scripting XSS vulnerability in ws/genericapicall.pl in Citrix NetScaler 8.0 build 47.8 allows remote attackers to inject arbitrary web script or HTML via the standalone parameter and other unspecified parameters...
Citrix NetScaler Web Management XSS
Citrix NetScaler Web Management XSS Product: Citrix NetScaler http://www.citrix.com/lang/English/ps2/index.asp Citrix NetScaler contains a cross-site scripting vulnerability in the web management interface. None of the parameter values of /ws/genericapicall.pl are sanitized before they get embedd...
Citrix NetScaler Generic_API_Call.PL跨站脚本漏洞
Citrix NetScaler是一款安全易用的Web应用交付解决方案。 Citrix NetScaler GenericAPICall.PL不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行跨站脚本攻击，获得目标用户敏感信息。 问题是由于'GenericAPICall.PL'脚本对用户提交的'standalone'参数缺少过滤，提交恶意脚本代码作为参数数据，并诱使用户处理，可导致获得目标用户敏感信息，或未授权访问应用程序。 Citrix NetScaler 8.0 build 47.8 目前没有详细解决方案提供：...
Citrix NetScaler crossite scripting
Crossite scripting in /ws/genericapicall.pl...
Citrix Netscaler 8.0 build 47.8 - Generic_API_Call.pl Cross-Site Scripting
Citrix Netscaler 8.0 build 47.8 - GenericAPICall.pl Cross-Site Scripting source: https://www.securityfocus.com/bid/26491/info Citrix NetScaler is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this iss...
Citrix Netscaler 8.0 build 47.8 - Generic_API_Call.pl Cross-Site Scripting
source: https://www.securityfocus.com/bid/26491/info Citrix NetScaler is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting use...
