CVE-2019-25381 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 POST Request hosts.cgi IP/HOSTNAME/COMMENT cross site scripting (Exploit 46333)

February 16, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in Smoothwall Express 3.1-SP4-polar-x86_64-update9. This issue affects some unknown processing of the file hosts.cgi of the component POST Request Handler. This manipulation of the argument IP/HOSTNAME/COMMENT causes cross site scripting.

This vulnerability is tracked as CVE-2019-25381. The attack is possible to be carried out remotely. Moreover, an exploit is present.VulDB Recent EntriesRead More