Skip to content

Instantly share code, notes, and snippets.

@dharmeshbaskaran
dharmeshbaskaran / CVE-2020-19202
Created May 23, 2021 10:35
Authenicated Stored XSS in IPFire 2.21
CVE-2020-19202
=======================================================================
* Authenicated Stored XSS in Captive.cgi
* Affected Product: IPFire 2.21 (x86_64) - Core Update 130
* Vendor: IPFire
* Vulnerability Class: Stored Cross-Site Scripting
* Status: Fixed
* Author: Dharmesh Baskaran
=======================================================================
@dharmeshbaskaran
dharmeshbaskaran / CVE-2020-19204
Created May 23, 2021 10:47
Authenicated Stored XSS in IPFire 2.21
CVE-2020-19204
=======================================================================
* Authenicated Stored XSS in routing.cgi
* Affected Product: Affects: IPFire 2.21 (x86_64) - Core Update 130
* Vendor: IPFire
* Vulnerability Class: Stored Cross-Site Scripting
* Status: Fixed
* Author: Dharmesh Baskaran
=======================================================================
@dharmeshbaskaran
dharmeshbaskaran / CVE-2020-19201
Created July 12, 2021 19:35
Authenticated Stored XSS in pfSense 2.4.4-p2
pfSense-SA-19_03.webgui Security Advisory
pfSense
Topic: XSS vulnerability in the WebGUI
Category: pfSense Base System
Module: webgui
Announced: 2019-05-20
Credits: Dharmesh Baskaran -- https://www.linkedin.com/in/dharmeshbaskaran
CVE ID: CVE-2020-19201
@dharmeshbaskaran
dharmeshbaskaran / CVE-2020-19203
Created July 12, 2021 19:43
Authenticated Stored XSS in pfSense 2.4.4-p2
=============================================================================
pfSense-SA-19_04.webgui Security Advisory
pfSense
Topic: XSS vulnerability in the WebGUI
Category: pfSense Base System
Module: webgui
Announced: 2019-05-20
Credits: Dharmesh Baskaran -- https://www.linkedin.com/in/dharmeshbaskaran