CVE-2013-5218

🗓️ 30 Dec 2013 02:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 49 Views🌐 WEB

CVE-2013-5218 Cross-site scripting vulnerability in HOT HOTBOX route

Reporter	Title	Published	Views	Family All 10
0day.today	HOTBOX 2.1.11 CSRF / Traversal / Denial Of Service	5 Nov 201300:00	–	zdt
0day.today	Sagemcom [email protected] 3184 2.1.11 - Multiple Vulnerabilities	8 Nov 201300:00	–	zdt
Cvelist	CVE-2013-5218	30 Dec 201302:00	–	cvelist
EUVD	EUVD-2013-5058	7 Oct 202500:30	–	euvd
exploitpack	Sagemcom F@st 3184 2.1.11 - Multiple Vulnerabilities	8 Nov 201300:00	–	exploitpack
NVD	CVE-2013-5218	30 Dec 201304:53	–	nvd
Packet Storm	HOTBOX 2.1.11 CSRF / Traversal / Denial Of Service	4 Nov 201300:00	–	packetstorm
Prion	Cross site scripting	30 Dec 201304:53	–	prion
seebug.org	NetVanta 7100 ADTRAN AOS跨站脚本漏洞	2 Jan 201400:00	–	seebug
seebug.org	Sagemcom F@st 3184 2.1.11 - Multiple Vulnerabilities	1 Jul 201400:00	–	seebug

NVD

Node

hot hotbox_router_firmwareMatch2.1.11

AND

hot hotbox_routerMatch-

Source	Link
youtube	www.youtube.com/watch
packetstormsecurity	www.packetstormsecurity.com/files/123901/HOTBOX-2.1.11-CSRF-Traversal-Denial-Of-Service.html

Parameter	Position	Path	Description	CWE
DHCP Host Name option	path	/wlanAccess.asp	XSS vulnerability in wlanAccess.asp where crafted DHCP Host Name option is not properly sanitized, allowing script/HTML injection.	CWE-79
DHCP Host Name option in DHCP table rendering	path	/wlanAccess.asp	XSS vulnerability in wlanAccess.asp where crafted DHCP Host Name option is not properly sanitized, allowing script/HTML injection.	CWE-79

29 Apr 2026 01:13Current

5.5Medium risk

Vulners AI Score5.5

CVSS 22.9

EPSS0.00819

cve-2013-5218 cross-site scripting xss vulnerability hot hotbox router nvd