CVE-2010-4412: XSS

Published Dec 7, 2010

Updated

Multiple cross-site scripting (XSS) vulnerabilities in pfSense 2 beta 4 allow remote attackers to inject arbitrary web script or HTML via (1) the id parameter in an olsrd.xml action to pkgedit.php, (2) the xml parameter to pkg.php, or the if parameter to (3) statusgraph.php or (4) interfaces.php, a different vulnerability than CVE-2008-1182 and CVE-2010-4246.

Affected Software

1 affected component

Bsdperimeter Pfsense=2.0-beta4

Event History

Dec 7, 2010

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2010-4412?

CVE-2010-4412 has a Medium severity rating due to its potential for facilitating cross-site scripting attacks.

How do I fix CVE-2010-4412?

To fix CVE-2010-4412, upgrade your pfSense installation to a version that addresses these vulnerabilities, ideally beyond 2.0-beta4.

What systems are affected by CVE-2010-4412?

CVE-2010-4412 specifically affects pfSense version 2.0-beta4.

What types of attacks can exploit CVE-2010-4412?

CVE-2010-4412 can be exploited to conduct cross-site scripting (XSS) attacks allowing attackers to inject malicious scripts.

Is CVE-2010-4412 a remote exploit?

Yes, CVE-2010-4412 allows remote attackers to exploit the vulnerability without needing physical access to the affected system.