CVE-2013-10050

An OS command injection vulnerability exists in multiple D-Link routers (confirmed on DIR-300 rev A v1.05 and DIR-615 rev D v4.13) via the authenticated tools_vct.xgi CGI endpoint. The web interface fails to properly sanitize user-supplied input in the pingIp parameter, allowing attackers with valid credentials to inject arbitrary shell commands. Exploitation enables full device compromise, including spawning a telnet daemon and establishing a root shell. The vulnerability is present in firmware versions that expose tools_vct.xgi and use the Mathopd/1.5p6 web server. No vendor patch is available, and affected models are end-of-life.

• CWE-78

• https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/dlink_dir300_exec_telnet.rbExploit
• https://web.archive.org/web/20140830203110/http://www.s3cur1ty.de/m1adv2013-014Exploit, Third Party Advisory
• https://www.exploit-db.com/exploits/25024Exploit
• https://www.exploit-db.com/exploits/27428Exploit
• https://www.vulncheck.com/advisories/d-link-legacy-unauth-rce-2Third Party Advisory
• https://www.exploit-db.com/raw/25024Exploit

Published

Aug 1, 2025

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-10045Rejected reason: This CVE has the been REJECTED and will not…
• CVE-2013-10046A local privilege escalation vulnerability exists in Agnitum…8.5
• CVE-2013-10047An unrestricted file upload vulnerability exists in MiniWeb …9.3
• CVE-2013-10048An OS command injection vulnerability exists in various lega…9.8
• CVE-2013-10049An OS command injection vulnerability exists in multiple Rai…9.3
• CVE-2013-1005WebKit, as used in Apple iTunes before 11.0.3, allows man-in…
• CVE-2013-10051A remote PHP code execution vulnerability exists in InstantC…9.8
• CVE-2013-10052ZPanel includes a helper binary named zsudo, intended to all…8.5
• CVE-2013-10053A remote command execution vulnerability exists in ZPanel ve…8.7
• CVE-2013-10054An unauthenticated arbitrary file upload vulnerability exist…9.3
• CVE-2013-10055An unauthenticated arbitrary file upload vulnerability exist…9.3
• CVE-2013-10056Rejected reason: This CVE has the been REJECTED and will not…