Unrated severityNVD Advisory· Published Jul 7, 2014· Updated Jun 17, 2026

CVE-2013-7389

Description

Multiple cross-site scripting (XSS) vulnerabilities in D-Link DIR-645 Router (Rev. A1) with firmware before 1.04B11 allow remote attackers to inject arbitrary web script or HTML via the (1) deviceid parameter to parentalcontrols/bind.php, (2) RESULT parameter to info.php, or (3) receiver parameter to bsc_sms_send.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dlink/Dir 645
cpe:2.3:h:dlink:dir-645:a1:*:*:*:*:*:*:*
Dlink/Dir 645 Firmware
cpe:2.3:o:dlink:dir-645_firmware:*:b08:*:*:*:*:*:*
Range: <=1.03
Dlink/DIR-645 Routerllm-create
Range: <1.04B11

Patches

Vulnerability mechanics

References

securityadvisories.dlink.com/security/publication.aspxnvdPatchVendor Advisory
roberto.greyhats.it/advisories/20130801-dlink-dir645.txtnvdExploit
osvdb.org/show/osvdb/95910nvd
osvdb.org/show/osvdb/95952nvd
osvdb.org/show/osvdb/95953nvd
www.securityfocus.com/bid/61579nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.022
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000