Code injection vulnerability in pfsense

Описание

Cross-site scripting vulnerabilities were found in pfSense. By exploiting these vulnerabilities malicious users can enject arbitrary sctip or HTML. These vulnerabilities can be exploited remotely via a specially designed parameters for web interface.

Первичный источник обнаружения

• pfSense advisory
  

Эксплуатация

Public exploits exist for this vulnerability.

Связанные продукты

• pfSense

Список CVE

• CVE-2015-2294
  warning

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com