Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

smoothwall smoothwall express 3.0 vulnerabilities and exploits

(subscribe to this query)
6.1
CVSSv3
CVE-2011-1084
A cross-site scripting (XSS) vulnerability in Smoothwall Express 3.
Smoothwall Smoothwall Express 3.0
8.8
CVSSv3
CVE-2011-1085
CSRF vulnerability in Smoothwall Express 3.
Smoothwall Smoothwall Express 3.0
NA
CVE-2011-5284
Cross-site request forgery (CSRF) vulnerability in the web management interface in httpd/cgi-bin/shutdown.cgi in Smoothwall Express 3.1 and 3.0 SP3 and previous versions allows remote malicious users to hijack the authentication of administrators for requests that perform a reboo...
Smoothwall SmoothwallSmoothwall Smoothwall 3.0
NA
CVE-2011-5283
Cross-site scripting (XSS) vulnerability in the web management interface in httpd/cgi-bin/ipinfo.cgi in Smoothwall Express 3.1 and 3.0 SP3 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the IP parameter in a Run action.
Smoothwall Smoothwall 3.0Smoothwall Smoothwall 3.1
NA
CVE-2014-9431
Multiple cross-site request forgery (CSRF) vulnerabilities in Smoothwall Express 3.1 and 3.0 SP3 allow remote malicious users to hijack the authentication of administrators for requests that change the (1) admin or (2) dial password via a request to httpd/cgi-bin/changepw.cgi.
Smoothwall Smoothwall 3.0Smoothwall Smoothwall 3.1
NA
CVE-2014-9429
Multiple cross-site scripting (XSS) vulnerabilities in Smoothwall Express 3.1 and 3.0 SP3 allow remote malicious users to inject arbitrary web script or HTML via the (1) PROFILENAME parameter in a Save action to httpd/cgi-bin/pppsetup.cgi or (2) COMMENT parameter in an Add action...
Smoothwall Smoothwall 3.0Smoothwall Smoothwall 3.1
NA
CVE-2014-9430
Cross-site scripting (XSS) vulnerability in httpd/cgi-bin/vpn.cgi/vpnconfig.dat in Smoothwall Express 3.0 SP3 allows remote malicious users to inject arbitrary web script or HTML via the COMMENT parameter in an Add action.
Smoothwall Smoothwall 3.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook