CVE-2016-10709

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/http/pfsensegraphinjectionexec.rb 2018-05-29 15:50:33+00:00| seen|...

CVE-2016-10709

Summary of CVE-2016-10709 : pfSense before 2.3 allows remote authenticated users to execute arbitrary OS commands via a ‘|’ character in the status_rrd_graph_img.php graph parameter (related to _rrd_graph_img.php). This is a post-authentication command-injection vulnerability affecting the web GU...