Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site request forgery (CSRF) vulnerability in system_firmware_restorefullbackup.php in the WebGUI in pfSense before 2.2.1 allows remote attackers to hijack the authentication of administrators for requests that delete arbitrary files via the deletefile parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Electric Sheep Fencing pfSense WebGUI 跨站请求伪造漏洞
Vulnerability Description
Electric Sheep Fencing pfsense是美国Electric Sheep Fencing公司的一套免费开源的基于FreeBSD的防火墙和路由器软件。 Electric Sheep Fencing pfSense 2.2及之前版本的WebGUI中的system_firmware_restorefullbackup.php脚本中存在跨站请求伪造漏洞。远程攻击者可借助‘deletefile’参数利用该漏洞删除任意文件。
CVSS Information
N/A
Vulnerability Type
N/A