CVE-2019-16701: Improper Neutralization of Special Elements used in an OS Command

pfSense through 2.3.4 through 2.4.4-p3 allows Remote Code Injection via a methodCall XML document with a pfsense.execphp call containing shell metacharacters in a parameter value...

PT-2019-14777

Name of the Vulnerable Software and Affected Versions pfSense versions 2.3.4 through 2.4.4-p3 Description The issue allows for remote code injection via a methodCall XML document. This is achieved by using a pfsense.exec php call that contains shell metacharacters in a parameter value, such as...