ISOMAN

CVE

CVE-2014-9430

Cross-site scripting (XSS) vulnerability in httpd/cgi-bin/vpn.cgi/vpnconfig.dat in Smoothwall Express 3.0 SP3 allows remote attackers to inject arbitrary web script or HTML via the COMMENT parameter in an Add action.

Severity
MEDIUM
CVSS
4.3
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
SmoothWall Express3.0-sp3 i386 express standardunknownsource
SmoothWall Express3.0-sp3 x86_64 express standardunknownsource
SmoothWall Express3.0-sp3 i386 express devunknownsource
SmoothWall Express3.0-sp3 x86_64 express devunknownsource

References

  1. http://packetstormsecurity.com/files/129698/SmoothWall-3.1-Cross-Site-Request-Forgery-Cross-Site-Scripting.html
  2. https://exchange.xforce.ibmcloud.com/vulnerabilities/99404
  3. http://packetstormsecurity.com/files/129698/SmoothWall-3.1-Cross-Site-Request-Forgery-Cross-Site-Scripting.html
  4. https://exchange.xforce.ibmcloud.com/vulnerabilities/99404