EDB-47413

PoC

Pfsense 2.3.4 / 2.4.4-p3 - Remote Code Injection

view exploit source exploit_dbtype webappsauthor Nassim Asrirpublished 2019-09-24catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2019-16701US	high8.8	19.6% (97th)	Exploit	2019-09-25
pfSense through 2.3.4 through 2.4.4-p3 allows Remote Code Injection via a methodCall XML document with a pfsense.exec_php call containing shell metacharacters in a parameter value.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.