CVE-2013-5223
Description
Multiple cross-site scripting (XSS) vulnerabilities in D-Link DSL-2760U Gateway (Rev. E1) allow remote authenticated users to inject arbitrary web script or HTML via the (1) ntpServer1 parameter to sntpcfg.cgi, username parameter to (2) ddnsmngr.cmd or (3) todmngr.tod, (4) TodUrlAdd parameter to urlfilter.cmd, (5) appName parameter to scprttrg.cmd, (6) fltName in an add action or (7) rmLst parameter in a remove action to scoutflt.cmd, (8) groupName parameter to portmapcfg.cmd, (9) snmpRoCommunity parameter to snmpconfig.cgi, (10) fltName parameter to scinflt.cmd, (11) PolicyName in an add action or (12) rmLst parameter in a remove action to prmngr.cmd, (13) ippName parameter to ippcfg.cmd, (14) smbNetBiosName or (15) smbDirName parameter to samba.cgi, or (16) wlSsid parameter to wlcfg.wl.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
19- packetstormsecurity.com/files/123976nvdExploitThird Party AdvisoryVDB Entry
- seclists.org/fulldisclosure/2013/Nov/76nvdExploitMailing ListThird Party Advisory
- securityadvisories.dlink.com/security/publication.aspxnvdVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/88723nvdThird Party AdvisoryVDB Entry
- exchange.xforce.ibmcloud.com/vulnerabilities/88724nvdThird Party AdvisoryVDB Entry
- osvdb.org/99603nvdBroken Link
- osvdb.org/99604nvdBroken Link
- osvdb.org/99605nvdBroken Link
- osvdb.org/99606nvdBroken Link
- osvdb.org/99607nvdBroken Link
- osvdb.org/99608nvdBroken Link
- osvdb.org/99609nvdBroken Link
- osvdb.org/99610nvdBroken Link
- osvdb.org/99611nvdBroken Link
- osvdb.org/99612nvdBroken Link
- osvdb.org/99613nvdBroken Link
- osvdb.org/99615nvdBroken Link
- osvdb.org/99616nvdBroken Link
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
0No linked articles in our index yet.