Lucene search
K

6 matches found

NVD
NVD
added 2026/02/16 6:19 p.m.3 views

CVE-2019-25395

Smoothwall Express 3.1-SP4-polar-x8664-update9 contains multiple stored cross-site scripting vulnerabilities in the preferences.cgi script that allow attackers to inject malicious scripts through the HOSTNAME, KEYMAP, and OPENNESS parameters. Attackers can submit POST requests with script payload...

7.2CVSS0.00042EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2026/02/16 5:5 p.m.3 views

CVE-2019-25395 Smoothwall Express 3.1 'preferences.cgi' Cross-Site Scripting

Smoothwall Express 3.1-SP4-polar-x8664-update9 contains multiple stored cross-site scripting vulnerabilities in the preferences.cgi script that allow attackers to inject malicious scripts through the HOSTNAME, KEYMAP, and OPENNESS parameters. Attackers can submit POST requests with script payload...

7.2CVSS5.3AI score0.00042EPSS
Exploits1References3
CVE
CVE
added 2026/02/16 5:5 p.m.6 views

CVE-2019-25395

CVE-2019-25395 affects Smoothwall Express 3.1-SP4-polar-x86_64-update9. The vulnerability is a stored cross-site scripting flaw in preferences.cgi, exploitable via POST requests that inject payloads through HOSTNAME, KEYMAP, and OPENNESS parameters. The attacker can store malicious script on the ...

7.2CVSS5.3AI score0.00042EPSS
Exploits1References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/02/16 5:5 p.m.4 views

CVE-2019-25395

Smoothwall Express 3.1-SP4-polar-x8664-update9 contains multiple stored cross-site scripting vulnerabilities in the preferences.cgi script that allow attackers to inject malicious scripts through the HOSTNAME, KEYMAP, and OPENNESS parameters. Attackers can submit POST requests with script payload...

7.2CVSS5.3AI score0.00042EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2026/02/16 5:5 p.m.23 views

CVE-2019-25395 Smoothwall Express 3.1 'preferences.cgi' Cross-Site Scripting

Smoothwall Express 3.1-SP4-polar-x8664-update9 contains multiple stored cross-site scripting vulnerabilities in the preferences.cgi script that allow attackers to inject malicious scripts through the HOSTNAME, KEYMAP, and OPENNESS parameters. Attackers can submit POST requests with script payload...

7.2CVSS0.00042EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2026/02/16 12:0 a.m.3 views

PT-2026-8377

Smoothwall Express 3.1-SP4-polar-x86 64-update9 contains multiple stored cross-site scripting vulnerabilities in the preferences.cgi script that allow attackers to inject malicious scripts through the HOSTNAME, KEYMAP, and OPENNESS parameters. Attackers can submit POST requests with script payloa...

7.2CVSS5.3AI score0.00042EPSS
Exploits1References3
Rows per page
Query Builder