medium6.1Public exploit code
CVE-2013-2679
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Linksys E4200 router with firmware 1.0.05 build 7 allow remote attackers to inject arbitrary web s…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Cisco Linksys E4200 - '/apply.cgi' Multiple Cross-Site Scripting Vulnerabilities2013-04-27 · remote · hardware · Verified
- Cisco Linksys E4200 - Multiple Vulnerabilities2013-05-07 · webapps · hardware
- Linksys WRT54GL Firmware 4.30.15 build 2 - Multiple Vulnerabilities2013-01-18 · webapps · hardware
Impact
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Linksys E4200 router with firmware 1.0.05 build 7 allow remote attackers to inject arbitrary web script or HTML via the (1) log_type, (2) ping_ip, (3) ping_size, (4) submit_type, or (5) traceroute_ip parameter to apply.cgi or (6) new_workgroup or (7) submit_button parameter to storage/apply.cgi.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Belkin | Linksys E4200 Firmware | Version 1.0.05 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/93059
- http://osvdb.org/93060
- http://packetstormsecurity.com/files/121551/Cisco-Linksys-E4200-Cross-Site-Scripting-Local-File-Inclusion.html
- http://www.cloudscan.me/2013/05/xss-lfi-linksys-e4200-firmware-0d.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84069
- http://osvdb.org/93059
- http://osvdb.org/93060
- http://packetstormsecurity.com/files/121551/Cisco-Linksys-E4200-Cross-Site-Scripting-Local-File-Inclusion.html
- http://www.cloudscan.me/2013/05/xss-lfi-linksys-e4200-firmware-0d.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84069