pfSense < 2.1.4 - 'status_rrd_graph_img.php' Command Injection. CVE-2014-4688 . webapps exploit for PHP platform