CVE

Id
41193  
CVE No.
CVE-2009-3758  
Status
Candidate  
Description
SQL injection vulnerability in login.php in sample code in the XenServer Resource Kit in Citrix XenCenterWeb allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20091022)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
452050 41193 CVE-2009-3758 BUGTRAQ:20090707 Citrix XenCenterWeb Multiple Vulnerabilities  View
452051 41193 CVE-2009-3758 URL:http://www.securityfocus.com/archive/1/504764  View
452052 41193 CVE-2009-3758 MILW0RM:9106  View
452053 41193 CVE-2009-3758 URL:http://www.milw0rm.com/exploits/9106  View
452054 41193 CVE-2009-3758 MISC:http://securenetwork.it/ricerca/advisory/download/SN-2009-01.txt  View
452055 41193 CVE-2009-3758 BID:35592  View
452056 41193 CVE-2009-3758 URL:http://www.securityfocus.com/bid/35592  View
452057 41193 CVE-2009-3758 SECTRACK:1022520  View
452058 41193 CVE-2009-3758 URL:http://securitytracker.com/id?1022520  View
452059 41193 CVE-2009-3758 VUPEN:ADV-2009-1814  View
452060 41193 CVE-2009-3758 URL:http://www.vupen.com/english/advisories/2009/1814  View
452061 41193 CVE-2009-3758 XF:xencenterweb-login-sql-injection(51574)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
36020 JVNDB-2010-001800 Oracle OpenSSO Enterprise における脆弱性 Oracle OpenSSO Enterprise には、完全性に影響のある脆弱性が存在します。 CVE-2009-3762 41193 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001800.html  View