Lucene search
+L

CVE-2013-5223

🗓️ 15 Nov 2013 20:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 997 Views🌐 WEB

Multiple XSS vulnerabilities in D-Link DSL-2760U Gateway (Rev. E1) allowing remote authenticated users to inject arbitrary web script or HTML

Related
Detection
Refs
Paths
NVD
ParameterPositionPathDescriptionCWE
ntpServer1query paramsntpcfg.cgi?ntp_enabled=1&ntpServer1=<value>XSS via ntpServer1 in sntpcfg.cgiCWE-79
usernamequery paramddnsmngr.cmd?action=add&service=1&hostname=aaa&username=<value>&password=zzz&iface=ppp0XSS via username in ddnsmngr.cmdCWE-79
usernamequery paramtodmngr.tod?action=add&username=<value>&mac=f1:de:f1:ab:cb:6d&days=1&start_time=571&end_time=732XSS via username in todmngr.todCWE-79
TodUrlAddquery paramurlfilter.cmd?action=set_url&TodUrlAdd=<value>&port_num=80XSS via TodUrlAdd in urlfilter.cmdCWE-79
appNamequery paramscprttrg.cmd?action=add&appName=<value>&dstWanIf=ppp0&tStart=1111,&tEnd=1112,&tProto=1,&oStart=11,&oEnd=11,&oProto=1XSS via appName in scprttrg.cmdCWE-79
fltNamequery paramscoutflt.cmd?action=add&fltName=<value>&protocol=1&srcAddr=10.0.0.10&srcMask=255.255.255.0&srcPort=80&dstAddr=10.0.0.12&dstMask=255.255.255.0&dstPort=8080XSS via fltName in scoutflt.cmdCWE-79
rmLstquery paramscoutflt.cmd?action=remove&rmLst=<value>XSS via rmLst in scoutflt.cmd (remove)CWE-79
groupNamequery paramportmapcfg.cmd?action=add&groupName=<value>&choiceBox=|usb0|wl0|&wanIfName=atm1XSS via groupName in portmapcfg.cmdCWE-79
snmpRoCommunityquery paramsnmpconfig.cgi?snmpStatus=1&snmpRoCommunity=<value>&snmpRwCommunity=private&snmpSysName=D-LINK&snmpSysContact=unknown&snmpSysLocation=unknown&snmpTrapIp=0.0.0.0XSS via snmpRoCommunity in snmpconfig.cgiCWE-79
fltNamequery paramscinflt.cmd?action=add&fltName=<value>&wanIf=ppp0&srcMask=255.255.255.0&srcPort=80&dstAddr=10.0.0.10&dstMask=255.255.255.0&dstPort=8080XSS via fltName in scinflt.cmdCWE-79
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

16 Jun 2026 23:58Current
5.3Medium risk
Vulners AI Score5.3
CVSS 23.5
CVSS 3.15.4
EPSS0.33567
SSVC
997