Multiple cross-site scripting (XSS) vulnerabilities in the Snort package before 3.0.13 for pfSense through 2.1.4 allow remote attackers to inject arbitrary web script or HTML via (1) the eng parameter to snort_import_aliases.php or (2) unspecified variables to snort_select_alias.php.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2014-07-02T10:00:00
Updated: 2024-08-06T11:27:36.132Z
Reserved: 2014-06-28T00:00:00
Link: CVE-2014-4693
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2014-07-02T10:35:26.080
Modified: 2019-05-30T14:57:55.027
Link: CVE-2014-4693
Redhat
No data.