Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting vulnerability in Citrix NFuse 1.6 and earlier does not quote results from the getLastError method, which allows remote attackers to execute script in other clients via the NFuse_Application parameter to (1) launch.jsp or (2) launch.asp.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Citrix NFuse存在跨站脚本执行漏洞
Vulnerability Description
Citrix NFuse是一款应用构建服务程序，通过WEB浏览器提供任意应用程序的功能，NFuse需要与WEB服务器结合工作，运行在多种操作系统下，包括Unix、Linux、Windows。 Citrix NFuse对用户输入过滤上存在漏洞，可使远程攻击者建立包含恶意代码的链接对其他浏览用户进行跨站脚本执行攻击。 Citrix NFuse中的launch.asp和launch.jsp脚本代码没有过滤来自URL参数的脚本代码，攻击者可以建立包含恶意Javascript代码的链接，当其他浏览用户访问此链接的时
CVSS Information
N/A
Vulnerability Type
N/A