PT-2026-8371 · Smoothwall · Smoothwall Express

Ozer Goker · Published 2026-02-16 · Updated 2026-02-20 · CVE-2019-25388

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Smoothwall Express version 3.1-SP4-polar-x86 64-update9

Description Smoothwall Express version 3.1-SP4-polar-x86 64-update9 contains a reflected cross-site scripting issue that allows unauthenticated attackers to inject malicious scripts. This is achieved by submitting crafted input to the ''ipblock.cgi'' endpoint. Specifically, attackers can inject script tags through the SRC IP and COMMENT parameters in POST requests, leading to the execution of arbitrary JavaScript in users' browsers.

Recommendations Apply input validation and output encoding to the SRC IP and COMMENT parameters in the ''ipblock.cgi'' endpoint.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2019-25388

Affected Products

Smoothwall Express

References · 7

• 🔥 https://exploit-db.com/exploits/46333 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25388 · Security Note
• https://osv.dev/vulnerability/CVE-2019-25388 · Vendor Advisory
• http://smoothwall.org · Note
• https://t.me/cveNotify/152610 · Telegram Post
• https://t.me/CVEtracker/44840 · Telegram Post
• https://vulncheck.com/advisories/smoothwall-express-ipblockcgi-cross-site-scripting · Note