References https://cve.imfht.com/detail/CVE-2012-5161 https://www.hkcert.org/tc/security-bulletin/citrix-xenapp-xml-service-interface-vulnerability https://www.tenable.com/plugins/nessus/63339 https://www.linuxidc.com/Linux/2011-07/39593.htm https://www.juniper.net/us/en/threatlabs/ips-signatures/detail.APP:CITRIX:XENAPP-XML-RCE.html https://www.hkcert.org/security-bulletin/citrix-xenapp-xml-service-interface-vulnerability https://seclists.org/bugtraq/2011/Jul/224 https://www.exploit-db.com/exploits/17582 https://vigilance.fr/vulnerability/Citrix-XenApp-XenDesktop-code-execution-via-XML-Service-10874 https://advisories.checkpoint.com/defense/advisories/public/2011/cpai-2011-558.html/
Related Vulnerabilities畅捷通 T+ POSSyncService.asmx 接口SQL注入漏洞PoCmonitorr-file-upload: Monitorr Services Configuration - Arbitrary File UploadServiceNow-AI-Platform /assessment_thanks.do 代码执行漏洞(CVE-2026-6875)PoCCVE-2026-6875: ServiceNow AI Platform - Pre-Auth JavaScript Sandbox Escape RCE金蝶EAS /ormrpc/services/BSHService 代码执行漏洞用友U8Cloud /ServiceDispatcherServlet 文件上传漏洞Citrix-NetScaler /saml/login 信息泄露漏洞(CVE-2026-8451)用友 U8cloud /service/XChangeServlet SQL 注入漏洞关于NC系统BapAnaRepDefService的sql注入漏洞的安全通告时空智友ERP系统 /formservice updater.uploadStudioFile 文件上传漏洞广联达OA /Mail/Services/EmailAccountOrgUserService.asmx/GetUserEmailByOrgEmails XML 外部实体注入漏洞Nezha /api/v1/server/1/service 信息泄露漏洞(CVE-2026-49397)广联达OA /Org/service/Service.asmx/GetChangeUsers 信息泄露漏洞