CVE-2015-2840 Cross-site scripting (XSS) vulnerability in help/rt/large_search.html in Citrix NetScaler before 10.5 build 52.3nc allows remote attackers to inject arbitrary web script or HTML via the searchQuery pa...
MediumCVSS 4.3
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in help/rt/large_search.html in Citrix NetScaler before 10.5 build 52.3nc allows remote attackers to inject arbitrary web script or HTML via the searchQuery parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| citrix netscaler | = 10.5 | No fix listed |
References
- packetstormsecurity.com exploit
- 20150319 Citrix NetScaler VPX help pages are vulnerable to Cross-Site Scripting mailing-list
- 20150319 Citrix NetScaler VPX help pages are vulnerable to Cross-Site Scripting mailing-list
- 73342 vdb-entry
- www.securify.nl exploit