Lucene search
K

7 matches found

CNVD
CNVD
added 2026/03/02 12:0 a.m.0 views

Smoothwall Express Cross-Site Scripting Vulnerability (CNVD-2026-14290)

Smoothwall Express is Smoothwall open source a GNU/Linux-based firewall operating system . Smoothwall Express has a cross-site scripting vulnerability , the vulnerability stems from the iptools.cgi endpoint IP parameters of the user-supplied data lack of effective filtering and escaping , an...

6.1CVSS5.9AI score0.00117EPSS
Exploits1References1
NVD
NVD
added 2026/02/16 6:19 p.m.2 views

CVE-2019-25392

Smoothwall Express 3.1-SP4-polar-x8664-update9 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the IP parameter. Attackers can send POST requests to the iptools.cgi endpoint with script payloads in the IP...

6.1CVSS0.00117EPSS
Exploits1References3
Cvelist
Cvelist
added 2026/02/16 5:5 p.m.25 views

CVE-2019-25392 Smoothwall Express 3.1 'iptools.cgi' Cross-Site Scripting

Smoothwall Express 3.1-SP4-polar-x8664-update9 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the IP parameter. Attackers can send POST requests to the iptools.cgi endpoint with script payloads in the IP...

6.1CVSS0.00117EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2026/02/16 5:5 p.m.2 views

CVE-2019-25392

Smoothwall Express 3.1-SP4-polar-x8664-update9 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the IP parameter. Attackers can send POST requests to the iptools.cgi endpoint with script payloads in the IP...

6.1CVSS5.6AI score0.00117EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2026/02/16 5:5 p.m.11 views

CVE-2019-25392

Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerability in the iptools.cgi endpoint. Attackers can exploit by sending POST requests with malicious payloads in the IP parameter, enabling unauthorized execution of JavaScript in victims’ browsers. The ...

6.1CVSS5.6AI score0.00117EPSS
Exploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/16 5:5 p.m.4 views

CVE-2019-25392 Smoothwall Express 3.1 'iptools.cgi' Cross-Site Scripting

Smoothwall Express 3.1-SP4-polar-x8664-update9 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the IP parameter. Attackers can send POST requests to the iptools.cgi endpoint with script payloads in the IP...

6.1CVSS5.6AI score0.00117EPSS
Exploits1References3
CNNVD
CNNVD
added 2026/02/16 12:0 a.m.3 views

Smoothwall Express 跨站脚本漏洞

Smoothwall Express is Smoothwall open source a GNU/Linux-based firewall operating system . Smoothwall Express has a cross-site scripting vulnerability , the vulnerability stems from the iptools.cgi endpoint IP parameters of the user-supplied data lack of effective filtering and escaping , an...

6.1CVSS5.9AI score0.00117EPSS
Exploits1References3
Rows per page
Query Builder