Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Smoothwall Express 3.1 and 3.0 SP3 allow remote attackers to inject arbitrary web script or HTML via the 1 PROFILENAME parameter in a Save action to httpd/cgi-bin/pppsetup.cgi or 2 COMMENT parameter in an Add action to httpd/cgi-bin/ddns.cgi...

CVE-2014-9429

CVE-2014-9429 affects Smoothwall Express 3.1 and 3.0 SP3. The vulnerability is a set of cross-site scripting flaws in the web management interface, exploitable via the PROFILENAME parameter in a Save action to httpd/cgi-bin/pppsetup.cgi or the COMMENT parameter in an Add action to httpd/cgi-bin/d...

PT-2014-9006

Name of the Vulnerable Software and Affected Versions Smoothwall Express versions 3.0 SP3 through 3.1 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the PROFILENAME parameter in a Save action to "httpd/cgi-bin/pppsetup.cgi" or the...

CVE-2014-9429: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Smoothwall Express 3.1 and 3.0 SP3 allow remote attackers to inject arbitrary web script or HTML via the 1 PROFILENAME parameter in a Save action to httpd/cgi-bin/pppsetup.cgi or 2 COMMENT parameter in an Add action to httpd/cgi-bin/ddns.cgi...

SmoothWall 3.1 Cross Site Request Forgery / Cross Site Scripting

Exploit Title: SmoothWall 3.1 Multiple vulnerabilities Date: 21/12/2014 Author: Yann CAM @ Synetis Vendor or Software Link: www.smoothwall.org - www.smoothwall.org/download/ Version: 3.1 Category: CSRF password reset & XSS persistent Google dork: Tested on: Smoothwall Linux distribution Smoothwal...