pfSense 2.1.3-RELEASE (amd64) Remote Command Execution Exploit

pfSense, a free BSD based open source firewall distribution, versions 2.2.6 and below contain a remote command execution vulnerability post authentication in the rrdgraphimg.php page. The vulnerability occurs via the graph GET parameter. A non-administrative authenticated attacker can inject...

pfSense authenticated graph status RCE

pfSense, a free BSD based open source firewall distribution, version use exploit/unix/http/pfsense/graphinjectionexec msf undefinedgraphinjectionexec show actions ...actions... msf undefinedgraphinjectionexec set ACTION msf undefinedgraphinjectionexec show options ...show and set options... msf...