CVE-2011-5047

CVE-2011-5047

EPSS 1.1%

Cross-site scripting (XSS) vulnerability in status_rrd_graph.php in pfSense before 2.0.1 allows remote attackers to inject arbitrary web script or HTML via the style parameter.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://blog.pfsense.org/?p=633 http://secunia.com/advisories/46780 https://exchange.xforce.ibmcloud.com/vulnerabilities/72090 http://www.osvdb.org/77981 http://www.securityfocus.com/bid/51169