CVE-2010-4566
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
43Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 28%
from disclosure to weaponsame day
Published on NVDJan 14
1st PoCDec 22
metasploitDec 21
The web authentication form in the NT4 authentication component in Citrix Access Gateway Enterprise Edition 9.2-49.8 and earlier, and the NTLM authentication component in Access Gateway Standard and Advanced Editions before Access Gateway 5.0, allows attackers to execute arbitrary commands via shell metacharacters in the password field.
Affected products
n/a · n/apublic PoCs found — 3✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/15806exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/16916cve_referencewww.exploit-db.com/exploits/16916unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.