EIP-2026-104749

This Metasploit module exploits a clickjacking vulnerability in pfSense <= 2.4.1 by tricking an authenticated admin into executing arbitrary PHP commands via a crafted webpage. It leverages a hidden iframe and JavaScript to submit a malicious form to the pfSense WebGUI's diag_command.php endpoint.