CVE-2014-4689
Absolute path traversal vulnerability in pkg_edit.php in pfSense before 2.1.4 allows remote attackers to read arbitrary XML files via a full pathname in the xml parameter.
Published: 2014-07-02 · CVSS: Unscored
Absolute path traversal vulnerability in pkg_edit.php in pfSense before 2.1.4 allows remote attackers to read arbitrary XML files via a full pathname in the xml parameter.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7