PT-2010-5488 · Bsdperimeter · Pfsense

Published 2010-12-07 · Updated 2010-12-10 · CVE-2010-4412

Mitre

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in pfSense 2 beta 4 allow remote attackers to inject arbitrary web script or HTML via (1) the id parameter in an olsrd.xml action to pkg edit.php, (2) the xml parameter to pkg.php, or the if parameter to (3) status graph.php or (4) interfaces.php, a different vulnerability than CVE-2008-1182 and CVE-2010-4246.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2010-4412

Affected Products

Pfsense

References · 9

• 🔥 https://exploit-db.com/exploits/35069 · Exploit
• 🔥 https://exploit-db.com/exploits/35071 · Exploit
• 🔥 https://exploit-db.com/exploits/35068 · Exploit
• 🔥 https://exploit-db.com/exploits/35070 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-4412 · Security Note
• http://openwall.com/lists/oss-security/2010/11/22/18 · Note
• http://openwall.com/lists/oss-security/2010/11/24/7 · Note
• http://openwall.com/lists/oss-security/2010/12/06/7 · Note
• http://seclists.org/fulldisclosure/2010/Nov/43 · Note