CVE-2011-5283

🗓️ 31 Dec 2014 22:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 62 Views🌐 WEB

Cross-site scripting vulnerability in web mgmt interface in Smoothwall Express 3.

Reporter	Title	Published	Views	Family All 7
Cvelist	CVE-2011-5283	31 Dec 201422:00	–	cvelist
Exploit DB	SmoothWall Express 3.0 - Multiple Vulnerabilities	17 Jan 201100:00	–	exploitdb
EUVD	EUVD-2011-5182	7 Oct 202500:30	–	euvd
NVD	CVE-2011-5283	31 Dec 201422:59	–	nvd
Prion	Cross site scripting	31 Dec 201422:59	–	prion
Positive Technologies	PT-2014-2197	31 Dec 201400:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2011-5283: Improper Neutralization of Input During Web Page Generation	31 Dec 201400:00	–	rapid7

NVD

Node

OR

smoothwall smoothwallMatch3.0sp3express

smoothwall smoothwallMatch3.1express

Source	Link
osvdb	www.osvdb.org/show/osvdb/70496
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/99404
packetstormsecurity	www.packetstormsecurity.com/files/129698/SmoothWall-3.1-Cross-Site-Request-Forgery-Cross-Site-Scripting.html
exploit-db	www.exploit-db.com/exploits/16006

Parameter	Position	Path	Description	CWE
IP	request body	/cgi-bin/ipinfo.cgi	XSS via IP parameter in Run action (ipinfo.cgi)	CWE-79
ACTION	request body	/cgi-bin/shutdown.cgi	CSRF via POST to shutdown.cgi triggering Reboot	CWE-79

16 Jun 2026 23:36Current

5.8Medium risk

Vulners AI Score5.8

CVSS 24.3

EPSS0.03217

cve-2011-5283 xss web management smoothwall express 3.1 security vulnerability