CVE-2019-25386 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 POST Request dmzholes.cgi SRC_IP/DEST_IP/COMMENT cross site scripting (Exploit 46333)

February 16, 2026 Yanac

A vulnerability has been found in Smoothwall Express 3.1-SP4-polar-x86_64-update9 and classified as problematic. The affected element is an unknown function of the file dmzholes.cgi of the component POST Request Handler. Performing a manipulation of the argument SRC_IP/DEST_IP/COMMENT results in cross site scripting.

This vulnerability is cataloged as CVE-2019-25386. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.VulDB Recent EntriesRead More