Family: CGI abuses : XSS --> Category: infos
Citrix Web Interface XSS Vulnerability Scan
Vulnerability Scan Summary
Checks for Citrix Web Interface Cross Site Scripting Vulnerability
Detailed Explanation for this Vulnerability Test
The remote server is running a Citrix Web Interface server that is vulnerable to cross site scripting. When a user fails to authenticate, the Citrix Web Interface includes the error message text in the URL. The error message can be tampered with to perform a XSS attack.
- http://support.citrix.com/kb/entry.jspa?entryID=3211 (Citrix Document ID: CTX102686)
Solution : Upgrade to Citrix Web Interface 2.1 or newer.
Threat Level: Medium
Click HERE for more information and discussions on this network vulnerability scan.