CVE-2013-3065

Currently unrated

Key Information:

Vendor
Linksys
Status
Ea6500 Firmware
Ea6500
Vendor
CVE Published:
29 September 2014

Summary

Cross-site scripting (XSS) vulnerability in the Parental Controls section in Linksys EA6500 with firmware 1.1.28.147876 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to the Blocked Specific Sites section.

References

http://securityevaluators.com/knowledge/case_studies/rout...
x_refsource_MISC
http://securityevaluators.com/knowledge/case_studies/rout...
x_refsource_MISC

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.