Description
Cross-site scripting (XSS) vulnerability in the login form in Citrix MetaFrame Secure Access Manager 2.0 through 2.2 and NFuse Elite 1.0 allows remote attackers to inject arbitrary web script or HTML via the username field.
References
- 1015305 vdb-entry
- 1015304 vdb-entry
- 15664 vdb-entry
- ADV-2005-2676 vdb-entry
- http://support.citrix.com/article/CTX108208
- citrix-login-xss(23396) vdb-entry
- 17819 third-party-advisory