CVE-2002-0504 Cross-site scripting vulnerability in Citrix NFuse 1.6 and earlier does not quote results from the getLastError method, which allows remote attackers to execute script in other clients via the NFuse_A...
HighCVSS 7.5
EPSS 7.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting vulnerability in Citrix NFuse 1.6 and earlier does not quote results from the getLastError method, which allows remote attackers to execute script in other clients via the NFuse_Application parameter to (1) launch.jsp or (2) launch.asp.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| citrix nfuse | <= 1.6 | No fix listed |
| citrix nfuse | = 1.51 | No fix listed |
References
- 20020327 NFuse Cross Site Scripting vulnerability exploit mailing-list
- nfuse-launch-css(8659) exploit vdb-entry
- 4372 exploit vdb-entry