Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in pfSense 2 beta 4 allow remote attackers to inject arbitrary web script or HTML via (1) the id parameter in an olsrd.xml action to pkg_edit.php, (2) the xml parameter to pkg.php, or the if parameter to (3) status_graph.php or (4) interfaces.php, a different vulnerability than CVE-2008-1182 and CVE-2010-4246.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Bsdperimeter pfSense多个跨站脚本攻击漏洞
Vulnerability Description
pfSense 是一个免费的、开源的、经过改造的FreeBSD的定制版本，主要用作防火墙和路由器。 pfSense 2 beta 4版本中存在多个跨站脚本攻击漏洞。远程攻击者可以借助(1)对pkg_edit.php文件的olsrd.xml操作中的id参数，(2)向pkg.php文件传递的xml参数，或者向(3)status_graph.php文件或(4)interfaces.php文件传递的if参数注入任意web脚本或者HTML。
CVSS Information
N/A
Vulnerability Type
N/A