Code injection vulnerability in pfsense

Описание

Cross-site scripting vulnerabilities were found in pfSense. By exploiting these vulnerabilities malicious users can enject arbitrary sctip or HTML. These vulnerabilities can be exploited remotely via a specially designed parameters for web interface.

Первичный источник обнаружения

• pfSense advisory
  

Эксплуатация

The following public exploits exists for this vulnerability:

https://www.exploit-db.com/exploits/36506

Связанные продукты

• pfSense

Список CVE

• CVE-2015-2294
  warning

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com