CVE-2013-3065

Summary: CVE-2013-3065 is an XSS vulnerability in the Parental Controls section of Linksys EA6500 firmware 1.1.28.147876. The issue is exploitable by remote authenticated users via the Blocked Specific Sites UI, enabling injection of arbitrary script/HTML. The connected records confirm the affect...

CVE-2013-3064

Open redirect vulnerability in ui/dynamic/unsecured.html in Linksys EA6500 with firmware 1.1.28.147876 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the target parameter...

CVE-2013-3065

Cross-site scripting XSS vulnerability in the Parental Controls section in Linksys EA6500 with firmware 1.1.28.147876 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to the Blocked Specific Sites section...

CVE-2013-3064

CVE-2013-3064 describes an open redirect vulnerability in the Linksys EA6500 web UI, specifically in the page UI/dynamic/unsecured.html. With firmware 1.1.28.147876, remote attackers can trick users into visiting arbitrary sites by supplying the malicious URL in the target parameter, enabling phi...