Cross-Site Request Forgery Vulnerability in Smoothwall Express by Smoothwall
CVE-2011-5284
Key Information:
- Vendor
Smoothwall
- Status
- Vendor
- CVE Published:
- 31 December 2014
Badges
What is CVE-2011-5284?
The CSRF vulnerability found in the Smoothwall Express web management interface allows attackers to exploit the shutdown.cgi script. By crafting specific requests, unauthorized individuals can potentially hijack the administrative session of users, enabling them to reboot the system without proper authentication. This vulnerability highlights the importance of securing administrative interfaces and employing safeguards against cross-site request forgery attacks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
References
Timeline
- ๐ก
Public PoC available
- ๐พ
Exploit known to exist
Vulnerability published
Vulnerability Reserved
