PT-2010-5488

CVE-2010-4412

·

Published

2010-12-07

·

Updated

2010-12-10

Description by

CVSS 2.0
4.3
Medium
MetricsAV:N/AC:M/Au:N/C:N/I:P/A:N
Multiple cross-site scripting (XSS) vulnerabilities in pfSense 2 beta 4 allow remote attackers to inject arbitrary web script or HTML via (1) the id parameter in an olsrd.xml action to pkg edit.php, (2) the xml parameter to pkg.php, or the if parameter to (3) status graph.php or (4) interfaces.php, a different vulnerability than CVE-2008-1182 and CVE-2010-4246.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')
Related identifiers
CVE-2010-4412
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com