PT-2015-5701

Name of the Vulnerable Software and Affected Versions pfSense versions prior to 2.2.1 Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack administrator authentication for requests that delete arbitrary files via the deletefile parameter in the system...

PT-2014-6056

Name of the Vulnerable Software and Affected Versions pfSense versions prior to 2.1.4 Description The issue allows remote attackers to read arbitrary .info files via a crafted path in the pkg parameter to "pkg mgr install.php" and allows remote authenticated users to read arbitrary files via the...