CVE-2018-16232

概要

参考情報

• doddsecurity.com/213/command-injection-on-ipfire-firewalls · Exploit
• ipfire.org/news/ipfire-2-21-core-update-124-released · Patch

ipfire のその他の脆弱性

• CVE-2019-25400中 5.4IPFire 2.21 Core Update 127 contains multiple reflected cross-site scripting vulnerabilities in the fwhosts.cgi script that allow attackers …
• CVE-2019-25399中 6.4IPFire 2.21 Core Update 127 contains multiple stored cross-site scripting vulnerabilities in the extrahd.cgi script that allow attackers to …
• CVE-2019-25398中 6.1IPFire 2.21 Core Update 127 contains multiple cross-site scripting vulnerabilities in the ovpnmain.cgi script that allow attackers to inject…
• CVE-2019-25397中 6.1IPFire 2.21 Core Update 127 contains multiple reflected cross-site scripting vulnerabilities in the hosts.cgi script that allow attackers to…
• CVE-2019-25396中 6.1IPFire 2.21 Core Update 127 contains a reflected cross-site scripting vulnerability in the updatexlrator.cgi script that allows attackers to…