CVE-2013-5223

D-Link DSL-2760U Gateway (Rev. E1) da bir nechta saytlararo skript (XSS) zaifliklari autentifikatsiya qilingan masofadan turib foydalanuvchilarga (1) ntpServer1 parametri orqali sntpcfg.cgi yoki foydalanuvchi nomi parametri (2)cmdnsmng (2)ddnsmng ga o‘zboshimchalik bilan veb-skript yoki HTML kiritish imkonini beradi. todmngr.tod, (4) TodUrlAdd parametri urlfilter.cmd, (5) appName parametri scprttrg.cmd, (6) fltName qo‘shish amalida yoki (7) rmLst parametri scoutflt.cmd uchun, (8) groupName parametri portmapcd.Communf,

CVSS Vector

Manbalar

• http://osvdb.org/99603
• http://osvdb.org/99604
• http://osvdb.org/99605
• http://osvdb.org/99606
• http://osvdb.org/99607