Unscored CVE-2008-5882 EUVD-2008-5852GHSA-638j-3c7c-6fjw

SQL injection vulnerability in login.asp in Citrix Application Gateway - Broadcast Server (BCS) before 6.1, as used by Avaya AG250 - Broadc…

Published Jan 9, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in login.asp in Citrix Application Gateway - Broadcast Server (BCS) before 6.1, as used by Avaya AG250 - Broadcast Server before 2.0 and possibly other products, allows remote attackers to execute arbitrary SQL commands via the txtUID parameter.

References

4889 third-party-advisory
33127 third-party-advisory
http://support.citrix.com/article/CTX119315
1021411 vdb-entry
32832 vdb-entry
20081223 DDIVRT-2008-16 Citrix Broadcast Server 6.0 login.asp SQL Injection --- Update for BID 32832 mailing-list