7 matches found
pfSense < 2.4.5 Multiple Vulnerabilities
According to its self-reported version number, the remote pfSense install is to 2.4.5. It is, therefore, affected by multiple vulnerabilities, including the following: - In pfSense 2.4.4-p2 and 2.4.4-p3, if it is possible to trick an authenticated administrator into clicking on a button on a...
pfSense cross-site scripting vulnerability (CNVD-2019-43357)
pfsense is an open source routing and firewall software , based on freebsd system customization and development . A cross-site scripting vulnerability exists in pfSense 2.4.4-p3 and earlier versions. The vulnerability stems from the unverified display of the username and delmac parameters in...
CVE-2019-16914
An XSS issue was discovered in pfSense through 2.4.4-p3. In servicescaptiveportalmac.php, the username and delmac parameters are displayed without sanitization...
Cross site scripting
An XSS issue was discovered in pfSense through 2.4.4-p3. In servicescaptiveportalmac.php, the username and delmac parameters are displayed without sanitization...
CVE-2019-16914
An XSS issue was discovered in pfSense through 2.4.4-p3. In servicescaptiveportalmac.php, the username and delmac parameters are displayed without sanitization...
PT-2019-14864
Name of the Vulnerable Software and Affected Versions pfSense versions prior to 2.4.4-p3 Description A cross-site scripting XSS issue was found. The username and delmac parameters in the services captiveportal mac.php file are displayed without proper sanitization. Recommendations For versions...
CVE-2019-16914: Improper Neutralization of Input During Web Page Generation
An XSS issue was discovered in pfSense through 2.4.4-p3. In servicescaptiveportalmac.php, the username and delmac parameters are displayed without sanitization...