CVE-2010-4246 Multiple cross-site scripting (XSS) vulnerabilities in graph.php in pfSense 1.2.3 and 2 beta 4 allow remote attackers to inject arbitrary web script or HTML via the (1) ifnum or (2) ifname parameter,....
MediumCVSS 4.3
EPSS 1.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site scripting (XSS) vulnerabilities in graph.php in pfSense 1.2.3 and 2 beta 4 allow remote attackers to inject arbitrary web script or HTML via the (1) ifnum or (2) ifname parameter, a different vulnerability than CVE-2008-1182.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bsdperimeter pfsense | = 1.2.3 | No fix listed |
| bsdperimeter pfsense | = 2.0-beta4 | No fix listed |
References
- [oss-security] 20101123 Can I request a cve for pfsense regarding --> "pfSense "graph.php" Cross-Site Scripting Vulnerabilities" mailing-list
- [oss-security] 20101124 Re: Can I request a cve for pfsense regarding --> "pfSense "graph.php" Cross-Site Scripting Vulnerabilities" mailing-list
- 20101106 pfsense xss issues. mailing-list
- 42138 third-party-advisory vendor-advisory
- 44738 exploit vdb-entry