Lucene search
+L

7 matches found

CNVD
CNVD
•added 2026/03/02 12:00 a.m.•27 views

Smoothwall Express Cross-Site Scripting Vulnerability (CNVD-2026-14349)

Smoothwall Express is Smoothwall open source a GNU/Linux-based firewall operating system . Smoothwall Express cross-site scripting vulnerability , the vulnerability stems from the portfw.cgi script multiple parameters of the user-supplied data lack of effective filtering and escaping , an attacke...

6.1CVSS6.2AI score0.00268EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2026/02/16 6:19 p.m.•23 views

CVE-2019-25384

Smoothwall Express 3.1-SP4-polar-x8664-update9 contains multiple reflected cross-site scripting vulnerabilities in the portfw.cgi script that allow attackers to inject malicious scripts through unvalidated parameters. Attackers can submit POST requests with script payloads in the EXT, SRCPORTSEL,...

6.1CVSS6.3AI score0.00268EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2026/02/16 5:04 p.m.•50 views

CVE-2019-25384 Smoothwall Express 3.1 'portfw.cgi' Cross-Site Scripting

Smoothwall Express 3.1-SP4-polar-x8664-update9 contains multiple reflected cross-site scripting vulnerabilities in the portfw.cgi script that allow attackers to inject malicious scripts through unvalidated parameters. Attackers can submit POST requests with script payloads in the EXT, SRCPORTSEL,...

6.1CVSS0.00268EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2026/02/16 5:04 p.m.•12 views

CVE-2019-25384 Smoothwall Express 3.1 'portfw.cgi' Cross-Site Scripting

Smoothwall Express 3.1-SP4-polar-x8664-update9 contains multiple reflected cross-site scripting vulnerabilities in the portfw.cgi script that allow attackers to inject malicious scripts through unvalidated parameters. Attackers can submit POST requests with script payloads in the EXT, SRCPORTSEL,...

6.1CVSS6.3AI score0.00268EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2026/02/16 12:00 a.m.•25 views

PT-2026-8367

Smoothwall Express 3.1-SP4-polar-x86 64-update9 contains multiple reflected cross-site scripting vulnerabilities in the portfw.cgi script that allow attackers to inject malicious scripts through unvalidated parameters. Attackers can submit POST requests with script payloads in the EXT, SRC PORT...

6.1CVSS6.3AI score0.00268EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/16 12:00 a.m.•7 views

CVE-2019-25384: Improper Neutralization of Input During Web Page Generation

Smoothwall Express 3.1-SP4-polar-x8664-update9 contains multiple reflected cross-site scripting vulnerabilities in the portfw.cgi script that allow attackers to inject malicious scripts through unvalidated parameters. Attackers can submit POST requests with script payloads in the EXT, SRCPORTSEL,...

6.1CVSS6.3AI score0.00268EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/02/16 12:00 a.m.•32 views

Smoothwall Express cross-site scripting vulnerability

Smoothwall Express is Smoothwall open source a GNU/Linux-based firewall operating system . Smoothwall Express cross-site scripting vulnerability , the vulnerability stems from the portfw.cgi script multiple parameters of the user-supplied data lack of effective filtering and escaping , an attacke...

6.1CVSS6.2AI score0.00268EPSS
SaveExploits1References3
Rows per page
Query Builder