Vulnerability Report

CVE-2011-5284

Title: Smoothwall Path Traversal / LFI

Arbitrary File Access

Proof Of Concept

PoC Available for CVE-2011-5284

CWE Category CWE-352
Published Date Dec 31, 2014
Modified Date Jun 16, 2026
Exploit Status Available
Score 6.8 CVSS v2.0
Exploit Probability (EPSS)
2.27%

Vulnerability Summary

CVE-2011-5284: Cross-site request forgery (CSRF) vulnerability in the web management interface in httpd/cgi-bin/shutdown.cgi in Smoothwall Express 3.1 and 3.0 SP3 and earlier allows remote attackers to hijack the authentication of administrators for requests that perform a reboot via a request to cgi-bin/shutdown.cgi.

Impacted Vendors

S
smoothwall 1

Reference Links

http://osvdb.org/show/osvdb/70497 http://packetstormsecurity.com/files/129698/SmoothWall-3.1-Cross-Site-Request-Forgery-Cross-Site-Scripting.html http://www.exploit-db.com/exploits/16006 https://exchange.xforce.ibmcloud.com/vulnerabilities/99403 http://osvdb.org/show/osvdb/70497 http://packetstormsecurity.com/files/129698/SmoothWall-3.1-Cross-Site-Request-Forgery-Cross-Site-Scripting.html http://www.exploit-db.com/exploits/16006 https://exchange.xforce.ibmcloud.com/vulnerabilities/99403
CVSS v2.0
Source Entity [email protected]
Severity MEDIUM
6.8
Access Vector
N/A
Authentication
N/A
RAW VECTOR AV:N/AC:M/Au:N/C:P/I:P/A:P

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2011-5284 Exploits & PoCs (Proof Of Concept)

Exploit-DB https://www.exploit-db.com/exploits/16006
View Code
MODIFIED

Vulnerability data updated via NVD.

MODIFIED

Vulnerability data updated via NVD.

MODIFIED

Vulnerability data updated via NVD.

MODIFIED

Vulnerability data or affected products updated.

PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector N/A
Complexity N/A
Privileges N/A
Interaction NONE
CVSS Vector String AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected Stack

No specific products linked.