CVE-2013-7389

The D-Link DIR-645 Router (Rev. A1) is vulnerable to multiple cross-site scripting (XSS) issues in firmware versions prior to 1.04B11 . Remote attackers can inject arbitrary web scripts or HTML by exploiting the deviceid parameter in parentalcontrols/bind.php, the RESULT parameter in info.php, or...