CVE-2010-4515 — Cross-site Scripting in Citrix WEB Interface

CWE-79 — Cross-site Scripting5 documents4 sources
Severity
4.3MEDIUMNVD
EPSS
0.4%
top 38.56%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Citrix WEB Interface
Timeline
PublishedDec 9
Latest updateMay 17

Description

Cross-site scripting (XSS) vulnerability in Citrix Web Interface 5.0, 5.1, and 5.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2007-6477 and CVE-2009-2454.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

▶NVDcitrix/web_interface4 versions+3

🔴Vulnerability Details

1
GHSA
GHSA-fpx6-72jp-cwh4: Cross-site scripting (XSS) vulnerability in Citrix Web Interface 5↗2022-05-17
▶

💥Exploits & PoCs

2
Exploit-DB
Konqueror 4.7.3 - Memory Corruption↗2012-11-01
▶
Exploit-DB
Yahoo! Messenger - 'YVerInfo.dll' ActiveX Control Buffer Overflow (Metasploit)↗2010-05-09
▶

📋Vendor Advisories

1
Citrix
CVE-2010-4515: Cross-site scripting (XSS) vulnerability in Citrix Web Interface 5.0, 5.1, and 5.3 allows remote attackers to inject arbitrary web script or HTML via↗2010-12-09
▶