medium4.3
CVE-2011-5047
Cross-site scripting (XSS) vulnerability in status_rrd_graph.php in pfSense before 2.0.1 allows remote attackers to inject arbitrary web script or HTML via the…
Impact
Cross-site scripting (XSS) vulnerability in status_rrd_graph.php in pfSense before 2.0.1 allows remote attackers to inject arbitrary web script or HTML via the style parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pfsense | Pfsense | through 2.0 Versions 1.0.x, 1.2.1, 1.2.2, 1.2.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://blog.pfsense.org/?p=633
- http://secunia.com/advisories/46780
- http://www.osvdb.org/77981
- http://www.securityfocus.com/bid/51169
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72090
- http://blog.pfsense.org/?p=633
- http://secunia.com/advisories/46780
- http://www.osvdb.org/77981
- http://www.securityfocus.com/bid/51169
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72090