CVE-2013-5223: D-Link DSL-2760U vulnerability
D-Link · DSL-2760U
Affected: D-Link DSL-2760U · Exploitation: in CISA KEV since 25 Mar 2022
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
ExploitationIn CISA KEV
- In CISA KEVCISA KEV catalogue25 Mar 2022
- Exploited (reported): not seen
- Scanning observed: not seen
- Proof of concept public: not seen
- Not established: not seen
Higher than 98% of scored CVEs
DescriptionCVE.org
Multiple cross-site scripting (XSS) vulnerabilities in D-Link DSL-2760U Gateway (Rev. E1) allow remote authenticated users to inject arbitrary web script or HTML via the (1) ntpServer1 parameter to sntpcfg.cgi, username parameter to (2) ddnsmngr.cmd or (3) todmngr.tod, (4) TodUrlAdd parameter to urlfilter.cmd, (5) appName parameter to scprttrg.cmd, (6) fltName in an add action or (7) rmLst parameter in a remove action to scoutflt.cmd, (8) groupName parameter to portmapcfg.cmd, (9) snmpRoCommunity parameter to snmpconfig.cgi, (10) fltName parameter to scinflt.cmd, (11) PolicyName in an add action or (12) rmLst parameter in a remove action to prmngr.cmd, (13) ippName parameter to ippcfg.cmd, (14) smbNetBiosName or (15) smbDirName parameter to samba.cgi, or (16) wlSsid parameter to wlcfg.wl.
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Exploited in the wild. Listed in the CISA Known Exploited Vulnerabilities catalogue.
- CISA KEV
- Listed since 25 Mar 2022 · catalogue entry
- Public check
- No public nuclei template
- Weakness
- Cross-site Scripting
- Vendor
- D-Link
- Published
- November 2013
What changed
- CISA added it to the KEV catalogue CISA
CoverageNo articles yet
No CyberSIXT article names CVE-2013-5223 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.
References
- NVD entrynvd.nist.gov
- CISA KEV cataloguecisa.gov
- CVE recordcve.org
- Weakness CWE-79cwe.mitre.org
- osvdb.org/99611osvdb.org
- osvdb.org/99609osvdb.org
- exchange.xforce.ibmcloud.com/vulnerabilities/88723exchange.xforce.ibmcloud.com
- exchange.xforce.ibmcloud.com/vulnerabilities/88724exchange.xforce.ibmcloud.com
- osvdb.org/99605osvdb.org
- securityadvisories.dlink.com/security/publication.aspx?name=SAP1securityadvisories.dlink.com
- osvdb.org/99607osvdb.org
- osvdb.org/99608osvdb.org
- osvdb.org/99606osvdb.org
- osvdb.org/99610osvdb.org
- osvdb.org/99604osvdb.org
- osvdb.org/99615osvdb.org
7 more references are in the CVE record.