CVE-2020-11457

Mô tả

Tham khảo

• packetstormsecurity.com/files/157104/pfSense-2.4.4-P3-User-Manager-Cross-Site-Scripting.html
• pfsense/pfsense commit 3c1e53d · Patch
• exploit-db.com/exploits/48300
• netgate.com/assets/downloads/advisories/pfSense-SA-20_06.webgui.asc · Patch

Lỗ hổng khác của pfsense

• CVE-2024-46538TRUNG BÌNH 4.8A cross-site scripting (XSS) vulnerability in pfsense v2.5.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload…
• CVE-2023-48123CAO 8.8An issue in Netgate pfSense Plus v.23.05.1 and before and pfSense CE v.2.7.0 allows a remote attacker to execute arbitrary code via a crafte…
• CVE-2023-42326CAO 8.8An issue in Netgate pfSense v.2.7.0 allows a remote attacker to execute arbitrary code via a crafted request to the interfaces_gif_edit.php …
• CVE-2023-42327TRUNG BÌNH 5.4Cross Site Scripting (XSS) vulnerability in Netgate pfSense v.2.7.0 allows a remote attacker to gain privileges via a crafted URL to the get…
• CVE-2023-42325TRUNG BÌNH 5.4Cross Site Scripting (XSS) vulnerability in Netgate pfSense v.2.7.0 allows a remote attacker to gain privileges via a crafted url to the sta…