CVE-2011-1084

A cross-site scripting XSS vulnerability in Smoothwall Express 3...

CVE-2011-1085

CSRF vulnerability in Smoothwall Express 3...

Cross site request forgery (csrf)

CSRF vulnerability in Smoothwall Express 3...

Cross site scripting

A cross-site scripting XSS vulnerability in Smoothwall Express 3...

CVE-2011-1085

CSRF vulnerability in Smoothwall Express 3...

CVE-2011-1085

The CVE-2011-1085 entry describes a Cross-Site Request Forgery (CSRF) vulnerability in Smoothwall Express 3. The connected records confirm affected software (Smoothwall Express 3) and classify the issue as CSRF, with CVSS details indicating high severity in the newer scope (CVSS 3.1: HIGH, 8.8) a...

CVE-2011-1084

A cross-site scripting XSS vulnerability in Smoothwall Express 3...

CVE-2011-1084

CVE-2011-1084 is a cross-site scripting (XSS) vulnerability in Smoothwall Express 3. The CVSS v3.1 base metrics indicate a Network attack vector, Low attack complexity, No privileges required, but User interaction is Required and the scope is Changed, with Low impact on confidentiality and integr...

Smoothwall Express 3.1-SP4 - Cross-Site Scripting

Smoothwall Express 3.1-SP4 - Cross-Site Scripting Exploit Title: Smoothwall Express 3.1-SP4-polar-x8664-update9 | Cross-Site Scripting Date: 06.02.2019 Exploit Author: Ozer Goker Vendor Homepage: http://www.smoothwall.org Software Link:...

Smoothwall Express 3.1-SP4 - Cross-Site Scripting Vulnerability

Exploit for cgi platform in category web applications Exploit Title: Smoothwall Express 3.1-SP4-polar-x8664-update9 | Cross-Site Scripting Date: 06.02.2019 Exploit Author: Ozer Goker Vendor Homepage: http://www.smoothwall.org Software Link:...

Smoothwall Express 3.1-SP4 - Cross-Site Scripting

Exploit Title: Smoothwall Express 3.1-SP4-polar-x8664-update9 | Cross-Site Scripting Date: 06.02.2019 Exploit Author: Ozer Goker Vendor Homepage: http://www.smoothwall.org Software Link: https://sourceforge.net/projects/smoothwall/files/SmoothWall/3.1%20SP4/Express-3.1-SP4-x8664.iso/download...

Multiple Cross-Site Request Forgery Vulnerabilities in Smoothwall Express

Smoothwall Express is a set of routing and firewall software for Linux-based systems. The software provides routing, firewall, NAT, VPN, IDS, dynamic DNS, internal and external network access control, network traffic control and monitoring, as well as logging and other functions. Smoothwall Expre...

Multiple Cross-Site Scripting Vulnerabilities in Smoothwall Express

Smoothwall Express is a set of routing and firewall software for Linux-based systems. The software provides routing, firewall, NAT, VPN, IDS, dynamic DNS, internal and external network access control, network traffic control and monitoring, as well as logging and other functions. Smoothwall Expre...

Smoothwall Express Cross-Site Scripting Vulnerability

Smoothwall Express is a set of routing and firewall software for Linux-based systems. The software provides routing, firewall, NAT, VPN, IDS, dynamic DNS, internal and external network access control, network traffic control and monitoring, as well as logging and other functions. A cross-site...

CVE-2014-9431

Multiple cross-site request forgery CSRF vulnerabilities in Smoothwall Express 3.1 and 3.0 SP3 allow remote attackers to hijack the authentication of administrators for requests that change the 1 admin or 2 dial password via a request to httpd/cgi-bin/changepw.cgi...

CVE-2014-9430

Cross-site scripting XSS vulnerability in httpd/cgi-bin/vpn.cgi/vpnconfig.dat in Smoothwall Express 3.0 SP3 allows remote attackers to inject arbitrary web script or HTML via the COMMENT parameter in an Add action...

CVE-2014-9429

Multiple cross-site scripting XSS vulnerabilities in Smoothwall Express 3.1 and 3.0 SP3 allow remote attackers to inject arbitrary web script or HTML via the 1 PROFILENAME parameter in a Save action to httpd/cgi-bin/pppsetup.cgi or 2 COMMENT parameter in an Add action to httpd/cgi-bin/ddns.cgi...

CVE-2011-5284

Cross-site request forgery CSRF vulnerability in the web management interface in httpd/cgi-bin/shutdown.cgi in Smoothwall Express 3.1 and 3.0 SP3 and earlier allows remote attackers to hijack the authentication of administrators for requests that perform a reboot via a request to...

Cross site scripting

Cross-site scripting XSS vulnerability in the web management interface in httpd/cgi-bin/ipinfo.cgi in Smoothwall Express 3.1 and 3.0 SP3 and earlier allows remote attackers to inject arbitrary web script or HTML via the IP parameter in a Run action...

CVE-2011-5283

Cross-site scripting XSS vulnerability in the web management interface in httpd/cgi-bin/ipinfo.cgi in Smoothwall Express 3.1 and 3.0 SP3 and earlier allows remote attackers to inject arbitrary web script or HTML via the IP parameter in a Run action...