CVE

Id
46830  
CVE No.
CVE-2010-4246  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in graph.php in pfSense 1.2.3 and 2 beta 4 allow remote attackers to inject arbitrary web script or HTML via the (1) ifnum or (2) ifname parameter, a different vulnerability than CVE-2008-1182.  
Phase
Assigned (20101116)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

"pfSense "graph.php" Cross-Site Scripting Vulnerabilities" --> "pfSense "graph.php" Cross-Site Scripting Vulnerabilities" -->
Id CVE Id CVE No. Reference Actions
511697 46830 CVE-2010-4246 FULLDISC:20101106 pfsense xss issues.  View
511698 46830 CVE-2010-4246 URL:http://seclists.org/fulldisclosure/2010/Nov/43  View
511699 46830 CVE-2010-4246 MLIST:[oss-security] 20101123 Can I request a cve for pfsense regarding --> "pfSense "graph.php" Cross-Site Scripting Vulnerabilities"  View
511700 46830 CVE-2010-4246 URL:http://openwall.com/lists/oss-security/2010/11/22/18  View
511701 46830 CVE-2010-4246 MLIST:[oss-security] 20101124 Re: Can I request a cve for pfsense regarding --> "pfSense "graph.php" Cross-Site Scripting Vulnerabilities"  View
511702 46830 CVE-2010-4246 URL:http://openwall.com/lists/oss-security/2010/11/24/7  View
511703 46830 CVE-2010-4246 BID:44738  View
511704 46830 CVE-2010-4246 URL:http://www.securityfocus.com/bid/44738  View
511705 46830 CVE-2010-4246 SECUNIA:42138  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
27113 JVNDB-2012-002820 Linux Kernel の inotify_init1 関数におけるサービス運用妨害 (メモリ消費) の脆弱性 Linux Kernel の fs/notify/inotify/inotify_user.c 内の inotify_init1 関数には、メモリリークにより、サービス運用妨害 (メモリ消費) 状態となる脆弱性が存在します。 CVE-2010-4250 46830 4.9 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002820.html  View