medium5.0Public exploit code
CVE-2001-0760
Citrix Nfuse 1.51 allows remote attackers to obtain the absolute path of the web root via a malformed request to launch.asp that does not provide the session f…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Citrix Nfuse 1.51 - Webroot Disclosure2001-07-02 · webapps · asp · Verified
Impact
Citrix Nfuse 1.51 allows remote attackers to obtain the absolute path of the web root via a malformed request to launch.asp that does not provide the session field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Citrix | Nfuse | Version 1.51 |
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/archive/1/194449
- http://www.securityfocus.com/archive/1/194522
- http://www.securityfocus.com/bid/2956
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6786
- http://www.securityfocus.com/archive/1/194449
- http://www.securityfocus.com/archive/1/194522
- http://www.securityfocus.com/bid/2956
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6786