CVE-2019-25382 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 POST Request time.cgi NTP_SERVER cross site scripting (Exploit 46333 / EDB-46333)

February 16, 2026 Yanac

A vulnerability identified as problematic has been detected in Smoothwall Express 3.1-SP4-polar-x86_64-update9. Affected by this issue is some unknown functionality of the file time.cgi of the component POST Request Handler. Performing a manipulation of the argument NTP_SERVER results in cross site scripting.

This vulnerability is known as CVE-2019-25382. Remote exploitation of the attack is possible. Furthermore, an exploit is available.VulDB Recent EntriesRead More