CVE-2014-9429

🗓️ 31 Dec 2014 22:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 37 Views🌐 WEB

Multiple XSS vulnerabilities in Smoothwall Express 3.1 & 3.0 SP3. Remote attackers inject arbitrary web script/HTML via PROFILENAME & COMMENT params in pppsetup.cgi & ddns.cgi

Reporter	Title	Published	Views	Family All 5
CNVD	Multiple Cross-Site Scripting Vulnerabilities in Smoothwall Express	8 Jan 201500:00	–	cnvd
Cvelist	CVE-2014-9429	31 Dec 201422:00	–	cvelist
EUVD	EUVD-2014-9250	7 Oct 202500:30	–	euvd
NVD	CVE-2014-9429	31 Dec 201422:59	–	nvd
Prion	Cross site scripting	31 Dec 201422:59	–	prion

NVD

Node

smoothwall smoothwallMatch3.0sp3express

smoothwall smoothwallMatch3.1express

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/129698/SmoothWall-3.1-Cross-Site-Request-Forgery-Cross-Site-Scripting.html
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/99404

Parameter	Position	Path	Description	CWE
PROFILENAME	request body	httpd/cgi-bin/pppsetup.cgi	Cross-site scripting via PROFILENAME in Save action	CWE-79
COMMENT	request body	httpd/cgi-bin/ddns.cgi	Cross-site scripting via COMMENT in Add action	CWE-79

06 May 2026 22:30Current

5.8Medium risk

Vulners AI Score5.8

CVSS 24.3

EPSS0.00225

CWE-79