PT-2014-6055

Name of the Vulnerable Software and Affected Versions pfSense versions prior to 2.1.4 Description The issue allows remote attackers to read arbitrary XML files by providing a full pathname in the xml parameter in the pkg edit.php file. Recommendations For versions prior to 2.1.4, update to versio...

PT-2010-5488

Multiple cross-site scripting XSS vulnerabilities in pfSense 2 beta 4 allow remote attackers to inject arbitrary web script or HTML via 1 the id parameter in an olsrd.xml action to pkg edit.php, 2 the xml parameter to pkg.php, or the if parameter to 3 status graph.php or 4 interfaces.php, a...