Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SQL injection vulnerability in login.php in sample code in the XenServer Resource Kit in Citrix XenCenterWeb allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: some of these details are obtained from third party information.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Citrix XenCenterWeb 'login.php'SQL注入漏洞
Vulnerability Description
Citrix XenCenterWeb是用于管理Citrix XenServer环境的web界面。 XenCenterWeb的多个模块没有正确的验证用户所提供的输入，远程攻击者可以通过向服务器提交恶意请求SQL注入攻击。 远程攻击者可以通过向login.php脚本提交恶意的username参数执行SQL盲注，检索整个数据库。
CVSS Information
N/A
Vulnerability Type
N/A