Lucene search
HistoryDec 31, 2014 - 10:59 p.m.
CVE-2014-9429
cve-2014-9429
cross-site scripting
xss
vulnerability
smoothwall express
remote attackers
web script
html
pppsetup.cgi
ddns.cgi
5.8 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
51.8%
Multiple cross-site scripting (XSS) vulnerabilities in Smoothwall Express 3.1 and 3.0 SP3 allow remote attackers to inject arbitrary web script or HTML via the (1) PROFILENAME parameter in a Save action to httpd/cgi-bin/pppsetup.cgi or (2) COMMENT parameter in an Add action to httpd/cgi-bin/ddns.cgi.
Affected configurations
Node
smoothwallsmoothwallMatch3.0sp3express
ORsmoothwallsmoothwallMatch3.1express
| CPE | Name | Operator | Version |
|---|---|---|---|
| smoothwall:smoothwall | smoothwall | eq | 3.0 |
| smoothwall:smoothwall | smoothwall | eq | 3.1 |
Related
prion
prion
Cross site scripting
2014-12-31 22:59:00
cvelist
cvelist
CVE-2014-9429
2014-12-31 22:00:00
nvd
nvd
CVE-2014-9429
2014-12-31 22:59:05
5.8 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
51.8%
Related for CVE-2014-9429