CVE-2009-3758

published 2009-10-22

CVE-2009-3758: SQL injection vulnerability in login.php in sample code in the XenServer Resource Kit in Citrix XenCenterWeb allows remote attackers to execute arbitrary SQL…

high 7.5 CVSS 3.1

AV N AC L Au N C P I P A P

EXPLOIT

SQL injection vulnerability in login.php in sample code in the XenServer Resource Kit in Citrix XenCenterWeb allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: some of these details are obtained from third party information.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
citrix	xenserver	—	—

CWE-89