PT-2019-14752

Name of the Vulnerable Software and Affected Versions pfSense version 2.4.4-p3 Description The issue allows for CSRF, potentially enabling the execution of OS commands. This is demonstrated through the txtCommand or txtRecallBuffer field in the diag command.php file. The csrf callback function is...

PT-2019-13047

Name of the Vulnerable Software and Affected Versions pfSense versions 2.4.4-p2 through 2.4.4-p3 Description The issue allows an attacker to leverage XSS to upload arbitrary executable code to a server if an authenticated administrator can be tricked into clicking on a button on a phishing page...