The web_node_register function in web.pm in PacketFence before 3.0.2 might allow remote attackers to execute arbitrary code via unspecified vectors.
CVSS Vector
AV:N/AC:L/Au:N/C:P/I:P/A:PPacketfence
APPPacketfence≤ 3.0.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCE
Related vulnerabilities
CVE-2011-4068CRITICAL9.8PL ✓same product
PacketFence – pominięcie uwierzytelnienia przez puste hasło (Auth Bypass)
CVE-2011-4069CRITICAL9.8PL ✓same product
LDAP injection w PacketFence umożliwiający ominięcie uwierzytelnienia
CVE-2012-4740MEDIUM4.3same product
Cross-site scripting (XSS) vulnerability in the captive portal in PacketFence before 3.3.0 allows remote attac...
CVE-2012-4741MEDIUM5.0same product
The RADIUS extension in PacketFence before 3.3.0 uses a different user name than is used for authentication fo...