PT-2026-8367 · Smoothwall · Smoothwall Express

Ozer Goker · Published 2026-02-16 · Updated 2026-02-16 · CVE-2019-25384

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Smoothwall Express version 3.1-SP4-polar-x86 64-update9

Description The software contains multiple reflected cross-site scripting issues within the portfw.cgi script. Attackers can inject malicious scripts through unvalidated parameters by submitting POST requests. Specifically, script payloads can be included in the EXT, SRC PORT SEL, SRC PORT, DEST IP, DEST PORT SEL, or COMMENT parameters. Successful exploitation allows attackers to execute arbitrary JavaScript in users' browsers.

Recommendations Apply input validation and sanitization to all parameters accepted by the portfw.cgi script, including EXT, SRC PORT SEL, SRC PORT, DEST IP, DEST PORT SEL, and COMMENT.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2019-25384

Affected Products

Smoothwall Express

References · 6

• 🔥 https://exploit-db.com/exploits/46333 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25384 · Security Note
• https://osv.dev/vulnerability/CVE-2019-25384 · Vendor Advisory
• http://smoothwall.org · Note
• https://vulncheck.com/advisories/smoothwall-express-portfwcgi-cross-site-scripting · Note
• https://t.me/CVEtracker/44836 · Telegram Post