Unrated severityNVD Advisory· Published Jul 7, 2014· Updated May 6, 2026

CVE-2013-7389

Description

Multiple cross-site scripting (XSS) vulnerabilities in D-Link DIR-645 Router (Rev. A1) with firmware before 1.04B11 allow remote attackers to inject arbitrary web script or HTML via the (1) deviceid parameter to parentalcontrols/bind.php, (2) RESULT parameter to info.php, or (3) receiver parameter to bsc_sms_send.php.

Affected products

Dlink/Dir 645
cpe:2.3:h:dlink:dir-645:a1:*:*:*:*:*:*:*
Dlink/Dir 645 Firmware
cpe:2.3:o:dlink:dir-645_firmware:*:b08:*:*:*:*:*:*
Range: <=1.03

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

securityadvisories.dlink.com/security/publication.aspxnvdPatchVendor Advisory
roberto.greyhats.it/advisories/20130801-dlink-dir645.txtnvdExploit
osvdb.org/show/osvdb/95910nvd
osvdb.org/show/osvdb/95952nvd
osvdb.org/show/osvdb/95953nvd
www.securityfocus.com/bid/61579nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.074
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000