The web management interface of SmoothWall Express 3.0 is vulnerable to xss and csrf. xss example: SmoothWall Express 3.0 xss
csrf example: SmoothWall Express 3.0 csrf