漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
漏洞
N/A
漏洞信息
An authenticated command injection vulnerability exists in status_interfaces.php via dhcp_relinquish_lease() in pfSense before 2.4.4 due to its passing user input from the $_POST parameters "ifdescr" and "ipv" to a shell without escaping the contents of the variables. This allows an authenticated WebGUI user with privileges for the affected page to execute commands in the context of the root user when submitting a request to relinquish a DHCP lease for an interface which is configured to obtain its address via DHCP.
漏洞信息
N/A
漏洞
N/A
漏洞
Electric Sheep Fencing pfsense 命令注入漏洞
漏洞信息
Electric Sheep Fencing pfsense是美国Electric Sheep Fencing公司的一套免费开源的基于FreeBSD的防火墙和路由器软件。 Electric Sheep Fencing pfSense 2.4.4之前版本中的status_interfaces.php文件存在命令注入漏洞。攻击者可借助‘dhcp_relinquish_lease()’函数利用该漏洞在root用户的上下文中执行命令。
漏洞信息
N/A
漏洞
N/A