Beveiligingsadvies

CVE-2019-25386

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-02-16 17:04:59

Laatst bijgewerkt 2026-03-05 01:26:30

Toegewezen door VulnCheck

CVSS-score 6.1

Status PUBLISHED

Beschrijving

Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple reflected cross-site scripting vulnerabilities in the dmzholes.cgi script that allow attackers to inject malicious scripts through unvalidated parameters. Attackers can submit POST requests with script payloads in the SRC_IP, DEST_IP, or COMMENT parameters to execute arbitrary JavaScript in users' browsers.

← Alle CVE's bekijken Bekijk op cve.org ↗