CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2013-11-19
D-Link DSL-2760U Gateway Multiple Parameter Cross-Site Scripting (XSS) Vulnerability (CVE-2013-5223)
[Affected Scope] D-Link DSL-2760U Gateway (Rev. E1) hardware and firmware.
[Impact] Remote authenticated attackers can inject arbitrary web script or HTML via multiple parameters, leading to administrator session hijacking and device compromise.
[Mitigation] Apply the latest official firmware patches, disable external WAN management interfaces, and restrict access to trusted IP ranges.