CVE-2013-3065 in Linksys EA6500

Resumen (Inglés)

Cross-site scripting (XSS) vulnerability in the Parental Controls section in Linksys EA6500 with firmware 1.1.28.147876 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to the Blocked Specific Sites section.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Reservar

2013-04-15

Divulgación

2014-09-29

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
10497	Cisco Linksys EA6500 secuencias de comandos en sitios cruzados	79	Prueba de concepto	No está definido	CVE-2013-3065

Fuentes

• MITRE
• NVD
• CVE Details