CVE-2019-25389

Smoothwall Express 3.1-SP4-polar-x8664-update9 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the MACHINES parameter. Attackers can craft requests to the timedaccess.cgi endpoint with script payloads in the...

CVE-2019-25389

CVE-2019-25389 affects Smoothwall Express 3.1-SP4-polar-x86_64-update9. It is a reflected cross-site scripting vulnerability in the timedaccess.cgi endpoint where an attacker can inject scripts via the MACHINES parameter to execute arbitrary JavaScript in users’ browsers. The issue is exploitable...