10127Third-party advisory
http://secunia.com/advisories/10127 CVE-2003-1157
Citrix Metaframe XP - Cross-Site Scripting
Record summary
CVE-2003-1157 has a selected CVSS score of 4.3; EIP currently links 1 catalogued exploit.
Description
Cross-site scripting (XSS) vulnerability in login.asp in Citrix MetaFrame XP Server 1.0 allows remote attackers to inject arbitrary web script or HTML via the NFuse_Message parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBCitrix Metaframe XP - Cross-Site ScriptingExploitDB exploitby Andy DavisNot analyzed1 file
References
82762vdb entry
http://www.osvdb.org/2762 20031031 IRM 008: Citrix Metaframe XP is vulnerable to Cross Site Scriptingmailing list
http://www.securityfocus.com/archive/1/343040 27948vdb entry
http://www.securityfocus.com/bid/27948 8939vdb entry
http://www.securityfocus.com/bid/8939 metaframe-error-message-xss(13569)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/13569 citrix-webmanager-login-xss(40782)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/40782 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2003-1157