IQID:12999 HTTP pfSense Community Edition XSS Vulnerability_1 S

IQID: 12999 - April 2016

Multiple instances of stored and reflected cross-scripting vulnerabilities exist in the web interface of the application. An authenticated attacker with limited privileges can run arbitrary JavaScript code in the context of admin users' session and extend their access to administrative areas of the application (i.e. command prompt functionality).

A Full Description is available for this threat, please sign in for access to Full Description.

 

Attack Data

Attack Data is available for this threat, please sign in for access to Attack Data.

 

CVSS Information

CVSS Information is available for this threat, please sign in for access to CVSS Information.

 

Date

Date Information is available for this threat, please sign in for access to Date Information.