Citrix Xencenterweb vulnerabilities

4 CVEs affecting Citrix Xencenterweb, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-3760, published 2009-10-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2009-3760, published 2009-10-22. High severity, CVSS 7.5. EPSS: 2.7% chance of exploitation in the next 30 days. Static code injection vulnerability in config/writeconfig.php in the sample code in the XenServer Resource Kit in Citrix XenCenterWeb allows remote attackers to inject arbitrary PHP code into…
CVE-2009-3759, published 2009-10-22. High severity, CVSS 8.8. EPSS: 2.3% chance of exploitation in the next 30 days. Multiple cross-site request forgery (CSRF) vulnerabilities in sample code in the XenServer Resource Kit in Citrix XenCenterWeb allow remote attackers to hijack the authentication of administrators…
CVE-2009-3757, published 2009-10-22. Medium severity, CVSS 4.3. EPSS: 1.7% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in sample code in the XenServer Resource Kit in Citrix XenCenterWeb allow remote attackers to inject arbitrary web script or HTML via the (1)…
CVE-2009-3758, published 2009-10-22. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. SQL injection vulnerability in login.php in sample code in the XenServer Resource Kit in Citrix XenCenterWeb allows remote attackers to execute arbitrary SQL commands via the username parameter. …