CVE-2010-4412

CVE-2010-4412 describes multiple cross-site scripting (XSS) vulnerabilities in pfSense 2 beta 4. The issues allow remote attackers to inject arbitrary web script or HTML via (1) id in olsrd.xml action to pkg_edit.php, (2) xml in pkg.php, or (3) if in status_graph.php, or (4) interfaces.php. The r...

CVE-2010-4246

CVE-2010-4246 describes multiple cross-site scripting (XSS) vulnerabilities in pfSense, specifically in the file graph.php for pfSense versions 1.2.3 and 2 beta 4. The vulnerabilities allow remote attackers to inject arbitrary web script or HTML by supplying the parameters (1) ifnum or (2) ifname...