CVE-2013-3065

Cross-site scripting XSS vulnerability in the Parental Controls section in Linksys EA6500 with firmware 1.1.28.147876 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to the Blocked Specific Sites section...

CVE-2013-3064

Open redirect vulnerability in ui/dynamic/unsecured.html in Linksys EA6500 with firmware 1.1.28.147876 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the target parameter...

CVE-2013-3066

Linksys EA6500 with firmware 1.1.28.147876 does not properly restrict access, which allows remote attackers to obtain sensitive information clients and router configuration via a request to /JNAP/...

CVE-2013-3066

The vulnerability CVE-2013-3066 affects Linksys EA6500 routers with firmware 1.1.28.147876. The issue is improper access restriction exposing sensitive information (clients and router configuration) through requests to /JNAP/. The CVE details from NVD describe a network-accessible flaw with high ...