CVE-2019-25393: Smoothwall Express 3.1 'smoothinfo.cgi' Cross-Site Scripting
Smoothwall Express 3.1-SP4-polar-x8664-update9 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by exploiting insufficient input validation. Attackers can submit POST requests to the smoothinfo.cgi endpoint with script payloads in the WRAP or SECTIONTITLE parameters to execute arbitrary JavaScript in victim browsers.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-25393?
The severity of CVE-2019-25393 is classified as medium due to its potential for allowing cross-site scripting attacks.
How do I fix CVE-2019-25393?
To fix CVE-2019-25393, ensure that your Smoothwall Express installation is updated to the latest version that addresses this vulnerability.
What is CVE-2019-25393?
CVE-2019-25393 is a cross-site scripting vulnerability in Smoothwall Express 3.1 that allows attackers to inject malicious scripts via insufficient input validation.
Who is affected by CVE-2019-25393?
CVE-2019-25393 affects users of Smoothwall Express 3.1, specifically those who are running version 3.1-SP4-polar-x86_64-update9.
Can CVE-2019-25393 be exploited remotely?
Yes, CVE-2019-25393 can be exploited remotely by unauthenticated attackers to execute arbitrary scripts.