Smoothwall Express: Malicious Scripts Can Run in Users' Browsers

Summary

An attacker can inject malicious scripts into Smoothwall Express by sending a specially crafted request to the time.cgi endpoint. This can allow the attacker to run code in users' browsers without their permission. Users should update to a fixed version of Smoothwall Express to prevent this attack.

What to do

No fix is available yet. Check with your software vendor for updates.

Affected software

Vendor	Product	Affected versions	Fix available
smoothwall	smoothwall_express	3.1	–

Original title

Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the NTP_SER...

Original description

Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the NTP_SERVER parameter. Attackers can send POST requests to the time.cgi endpoint with script payloads in the NTP_SERVER parameter to execute arbitrary JavaScript in users' browsers.

nvd CVSS3.1 6.1

nvd CVSS4.0 5.1

Vulnerability type

CWE-79 Cross-site Scripting (XSS)

http://www.smoothwall.org Product
https://www.exploit-db.com/exploits/46333 Exploit Third Party Advisory VDB Entry
https://www.vulncheck.com/advisories/smoothwall-express-time-cgi-cross-site-scri... Third Party Advisory