788 matches found
CVE-2014-5516
KonaKart Storefront Application (DS Data Systems) prior to 7.3.0.0 is vulnerable to CSRF protection bypass that allows an attacker to hijack an administrator’s session by issuing a manipulated GET request to change a user email address. The issue is documented in CVE-2014-5516, with a remediation...
PT-2020-7719
Name of the Vulnerable Software and Affected Versions DS Data Systems KonaKart versions prior to 7.3.0.0 Description A cross-site request forgery CSRF issue exists in the Storefront Application, allowing remote attackers to hijack the authentication of administrators for requests that change a us...
CVE-2014-5516: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the Storefront Application in DS Data Systems KonaKart before 7.3.0.0 allows remote attackers to hijack the authentication of administrators for requests that change a user email address via an unspecified GET request...
How to use StoreFront Multi-Site Aggregation to configure high availability
This article focuses on configuringhigh availability using StoreFront's Multi-Site Aggregation feature in case of standalone Virtual Apps and Desktops sites with identical published apps. This is not a disaster recovery solution however, it can be used as an alternative and it will be helpful in...
Storefront: Issue with creating new deployment - "Unable to Create Deployment"
1. Unable to create StoreFront Deployment on a VM hosted on VMware with VMware tools installed Exception: New Server Deployment An error occurred running the command: 'Set-DSNewClusterEnvironment' An error occurred while adding the StoreFront configuration API. Exception of type...
Citrix StoreFront Server XML External Entity Injection (CVE-2019-13608)
An XML external entity injection vulnerability exists in Citrix StoreFront Server. A successful exploitation of this vulnerability could result in the disclosure of file contents from the target system...
CVE-2019-8108
Insecure authentication and session management vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can manipulate session validation setting for a storefront that leads to insecure authentication and session management...
How To Customize The Window Title Of Native Citrix Receiver Authentication Dialogs
This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. All native Citrix Receiver authentication dialogs have title “Citrix Receiver” thus: This article...
Citrix StoreFront Server 7.15 XML Injection
Exploit Title: Citrix StoreFront Server 7.15 - XML External Entity Injection Date: 2019-08-28 Exploit Author: Vahagn Vardanya Vendor Homepage:https://www.citrix.com/downloads/storefront/ Software Link: https://support.citrix.com/article/CTX251988 Version: Citrix StoreFront Server earlier than 190...
Citrix StoreFront Server 7.15 - XML External Entity Injection Vulnerability
Exploit for xml platform in category web applications Exploit Title: Citrix StoreFront Server 7.15 - XML External Entity Injection Exploit Author: Vahagn Vardanya Vendor Homepage:https://www.citrix.com/downloads/storefront/ Software Link: https://support.citrix.com/article/CTX251988 Version: Citr...
Citrix StoreFront Server 7.15 - XML External Entity Injection
Citrix StoreFront Server 7.15 - XML External Entity Injection Exploit Title: Citrix StoreFront Server 7.15 - XML External Entity Injection Date: 2019-08-28 Exploit Author: Vahagn Vardanya Vendor Homepage:https://www.citrix.com/downloads/storefront/ Software Link:...
Citrix StoreFront Server 7.15 - XML External Entity Injection
Exploit Title: Citrix StoreFront Server 7.15 - XML External Entity Injection Date: 2019-08-28 Exploit Author: Vahagn Vardanya Vendor Homepage:https://www.citrix.com/downloads/storefront/ Software Link: https://support.citrix.com/article/CTX251988 Version: Citrix StoreFront Server earlier than 190...
Configuring SAML Authentication from StoreFront to NetScaler
This article is to step through configuring SAML Authentication between StoreFront as the Service Provider SP and NetScaler as the Identity Provider IdP...
Shopify: StoreFront API allows for a brute force attack on customer login by not timing out ALL attempts
It seems that the service used for login purposes could be brute forced. the system fails when the password is incorrect, after some unsuccessful attempts the following message is shown: "data":"customerAccessTokenCreate":null,"errors":"message":"Login attempt limit exceeded. Please try again...
Storefront upgrade from fails from 3.12 to 3.14 - 'CitrixStoreFront-x64.exe' component failed to install with error 0x00000643
Storefront upgrade from fails from 3.12 to 3.14 - 'CitrixStoreFront-x64.exe' component failed to install with error 0x00000643 These lines appear in the logs. 09:11:45.4298 : XenDesktopSetup:Starting synchronous process...
Upgrading to Storefront 3.12 CU4 fails - MSI logs shows Citrix Protocol Transition service exception
When attempting to upgrade Storefront 3.12 LTSR to CU4 fails. In the Install wizard the following message is displayed: When checking the MSI Installer logs the following exception is found NOTE: MSI logs are found in C:\Windows\Temp\Storefront\CitrixMsi-CitrixStoreFront-x64-201X.-xx-xx-xx.log...
StoreFront Cannot Complete your request - Access is denied. Contact your system administrator. - No endpoint listening at net.pipe
StoreFront event log shows Access is denied. Contact your system administrator. System.ServiceModel.EndpointNotFoundException, System.ServiceModel, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 There was no endpoint listening at net.pipe://localhost/Citrix/Authentication/Win32...
CVE-2019-13608
Citrix StoreFront Server before 1903, 7.15 LTSR before CU4 3.12.4000, and 7.6 LTSR before CU8 3.0.8000 allows XXE attacks...
