Vulners
Lucene search
pfSense 2.4.4-p1 (HAProxy Package 0.59_14) Cross Site Scripting
🗓️ 13 Mar 2019 00:00:00Reported by Gionathan RealeType 
packetstorm🔗 packetstormsecurity.com👁 71 Views
| Reporter | Title | Published | Views | Family All 8 |
|---|---|---|---|---|
 | pfSense 2.4.4-p1 (HAProxy Package 0.59_14) - Persistent Cross-Site Scripting Vulnerability | 13 Mar 201900:00 | – | zdt |
 | pfSense HAProxy package cross-site scripting vulnerability | 22 Feb 201900:00 | – | cnvd |
 | Netgate pfSense Stored Cross-Site Scripting (CVE-2019-8953) | 24 Oct 201900:00 | – | checkpoint_advisories |
 | CVE-2019-8953 | 20 Feb 201916:00 | – | cve |
 | CVE-2019-8953 | 20 Feb 201916:00 | – | cvelist |
 | CVE-2019-8953 | 20 Feb 201916:29 | – | nvd |
 | Design/Logic Flaw | 20 Feb 201916:29 | – | prion |
 | SUSE CVE-2019-8953 | 15 Feb 202304:15 | – | susecve |
`# Exploit Title: pfSense 2.4.4-p1 (HAProxy Package 0.59_14) - Stored Cross-Site Scripting
# Date: 13.02.2019
# Exploit Author: Gionathan "John" Reale
# Vendor Homepage: https://www.pfsense.org
# Version: 2.4.4-p1/0.59_14
# Software Link: N/A
# Google Dork: N/A
# CVE:2019-8953
##################################################################################################################################
Introduction pfSenseA(r) software is a free, open source customized distribution of FreeBSD specifically tailored for use as a firewall and router that is entirely managed via web interface.
In addition to being a powerful, flexible firewalling and routing platform, it includes a long list of related features and a package system allowing further expandability without adding bloat and potential security vulnerabilities to the base distribution.
HAProxy is free, open source software that provides a high availability load balancer and proxy server for TCP and HTTP-based applications that spreads requests across multiple servers.
#################################################################################
Example: URL https://192.168.1.1/haproxy/haproxy_listeners_edit.php
PARAMETER Description
PAYLOAD "><script>alert("test")</script>
`
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
13 Mar 2019 00:00Current
6.4Medium risk
Vulners AI Score6.4
EPSS0.71724