CVE-2013-2679: XSS
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Linksys E4200 router with firmware 1.0.05 build 7 allow remote attackers to inject arbitrary web script or HTML via the (1) logtype, (2) pingip, (3) pingsize, (4) submittype, or (5) tracerouteip parameter to apply.cgi or (6) newworkgroup or (7) submitbutton parameter to storage/apply.cgi.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2013-2679?
CVE-2013-2679 is a vulnerability that allows remote attackers to inject arbitrary web script or HTML into Cisco Linksys E4200 router with firmware 1.0.05 build 7.
What is the severity of CVE-2013-2679?
CVE-2013-2679 has a severity of medium with a score of 6.1.
Which software versions are affected by CVE-2013-2679?
Cisco Linksys E4200 router with firmware version 1.0.05 build 7 is affected by CVE-2013-2679.
How can remote attackers exploit CVE-2013-2679?
Remote attackers can exploit CVE-2013-2679 by injecting arbitrary web script or HTML via specific parameters in apply.cgi.
Are all versions of Belkin Linksys E4200 vulnerable to CVE-2013-2679?
No, only Cisco Linksys E4200 router with firmware version 1.0.05 build 7 is vulnerable to CVE-2013-2679.