CVE-2010-4412

This exploit demonstrates a reflected XSS vulnerability in pfSense 2 Beta 4 by injecting a malicious script via the 'if' parameter in status_graph.php. The PoC uses a simple alert(1) payload to confirm the vulnerability.

This exploit demonstrates a cross-site scripting (XSS) vulnerability in pfSense by injecting arbitrary JavaScript code via the 'id' parameter in the URL. The vulnerability arises due to insufficient input sanitization in the 'pkg_edit.php' script.

This exploit demonstrates a reflected XSS vulnerability in pfSense by injecting arbitrary JavaScript code via the 'xml' parameter in the pkg.php file. The payload triggers an alert dialog, proving the vulnerability.

This is a writeup describing a cross-site scripting (XSS) vulnerability in pfSense 2 Beta 4. It includes a proof-of-concept URL demonstrating the vulnerability but does not contain executable exploit code.