ByteOS Network

CVE Vulnerability Details :

CVE-2013-5223

PUBLISHED

Known KEV

More Info Official Page

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

View Known Exploited Vulnerability (KEV) details

Published At-15 Nov, 2013 | 20:00

Updated At-30 Jul, 2025 | 01:46

▼CVE Numbering Authority (CNA)

Multiple cross-site scripting (XSS) vulnerabilities in D-Link DSL-2760U Gateway (Rev. E1) allow remote authenticated users to inject arbitrary web script or HTML via the (1) ntpServer1 parameter to sntpcfg.cgi, username parameter to (2) ddnsmngr.cmd or (3) todmngr.tod, (4) TodUrlAdd parameter to urlfilter.cmd, (5) appName parameter to scprttrg.cmd, (6) fltName in an add action or (7) rmLst parameter in a remove action to scoutflt.cmd, (8) groupName parameter to portmapcfg.cmd, (9) snmpRoCommunity parameter to snmpconfig.cgi, (10) fltName parameter to scinflt.cmd, (11) PolicyName in an add action or (12) rmLst parameter in a remove action to prmngr.cmd, (13) ippName parameter to ippcfg.cmd, (14) smbNetBiosName or (15) smbDirName parameter to samba.cgi, or (16) wlSsid parameter to wlcfg.wl.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

References

Hyperlink	Resource
http://osvdb.org/99611	vdb-entry x_refsource_OSVDB
http://osvdb.org/99609	vdb-entry x_refsource_OSVDB
https://exchange.xforce.ibmcloud.com/vulnerabilities/88723	vdb-entry x_refsource_XF
https://exchange.xforce.ibmcloud.com/vulnerabilities/88724	vdb-entry x_refsource_XF
http://osvdb.org/99605	vdb-entry x_refsource_OSVDB
http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10002	x_refsource_CONFIRM
http://osvdb.org/99607	vdb-entry x_refsource_OSVDB
http://osvdb.org/99608	vdb-entry x_refsource_OSVDB
http://osvdb.org/99606	vdb-entry x_refsource_OSVDB
http://osvdb.org/99610	vdb-entry x_refsource_OSVDB
http://osvdb.org/99604	vdb-entry x_refsource_OSVDB
http://osvdb.org/99615	vdb-entry x_refsource_OSVDB
http://seclists.org/fulldisclosure/2013/Nov/76	mailing-list x_refsource_FULLDISC
http://osvdb.org/99603	vdb-entry x_refsource_OSVDB
http://osvdb.org/99612	vdb-entry x_refsource_OSVDB
http://osvdb.org/99616	vdb-entry x_refsource_OSVDB
http://packetstormsecurity.com/files/123976	x_refsource_MISC
http://osvdb.org/99613	vdb-entry x_refsource_OSVDB

▼Authorized Data Publishers (ADP)

1. CVE Program Container

References

Hyperlink	Resource
http://osvdb.org/99611	vdb-entry x_refsource_OSVDB x_transferred
http://osvdb.org/99609	vdb-entry x_refsource_OSVDB x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/88723	vdb-entry x_refsource_XF x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/88724	vdb-entry x_refsource_XF x_transferred
http://osvdb.org/99605	vdb-entry x_refsource_OSVDB x_transferred
http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10002	x_refsource_CONFIRM x_transferred
http://osvdb.org/99607	vdb-entry x_refsource_OSVDB x_transferred
http://osvdb.org/99608	vdb-entry x_refsource_OSVDB x_transferred
http://osvdb.org/99606	vdb-entry x_refsource_OSVDB x_transferred
http://osvdb.org/99610	vdb-entry x_refsource_OSVDB x_transferred
http://osvdb.org/99604	vdb-entry x_refsource_OSVDB x_transferred
http://osvdb.org/99615	vdb-entry x_refsource_OSVDB x_transferred
http://seclists.org/fulldisclosure/2013/Nov/76	mailing-list x_refsource_FULLDISC x_transferred
http://osvdb.org/99603	vdb-entry x_refsource_OSVDB x_transferred
http://osvdb.org/99612	vdb-entry x_refsource_OSVDB x_transferred
http://osvdb.org/99616	vdb-entry x_refsource_OSVDB x_transferred
http://packetstormsecurity.com/files/123976	x_refsource_MISC x_transferred
http://osvdb.org/99613	vdb-entry x_refsource_OSVDB x_transferred

2. CISA ADP Vulnrichment

Problem Types

Type	CWE ID	Description
CWE	CWE-79	CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Metrics

Version	Base score	Base severity	Vector
3.1	5.4	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Metrics Other Info

kev

dateAdded:

2022-03-25

reference:

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-5223

Timeline

Event	Date
CVE-2013-5223 added to CISA KEV	2022-03-25 00:00:00

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References