CVE-2013-2679

Multiple cross-site scripting (XSS) vulnerabilities in Cisco Linksys E4200 router with firmware 1.0.05 build 7 allow remote attackers to inject arbitrary web script or HTML via the (1) log_type, (2) ping_ip, (3) ping_size, (4) submit_type, or (5) traceroute_ip parameter to apply.cgi or (6) new_workgroup or (7) submit_button parameter to storage/apply.cgi.

• CWE-79

• http://osvdb.org/93059Broken Link
• http://osvdb.org/93060Broken Link
• http://packetstormsecurity.com/files/121551/Cisco-Linksys-E4200-Cross-Site-Scripting-Local-File-Inclusion.htmlExploit, Third Party Advisory, VDB Entry
• http://www.cloudscan.me/2013/05/xss-lfi-linksys-e4200-firmware-0d.htmlExploit, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/84069Third Party Advisory, VDB Entry
• http://osvdb.org/93059Broken Link
• http://osvdb.org/93060Broken Link
• http://packetstormsecurity.com/files/121551/Cisco-Linksys-E4200-Cross-Site-Scripting-Local-File-Inclusion.htmlExploit, Third Party Advisory, VDB Entry
• http://www.cloudscan.me/2013/05/xss-lfi-linksys-e4200-firmware-0d.htmlExploit, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/84069Third Party Advisory, VDB Entry

Published

Feb 18, 2020

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-2672Brother MFC-9970CDW devices with firmware 0D allow cleartext…7.5
• CVE-2013-2673Brother MFC-9970CDW 1.10 firmware L devices contain a securi…6.8
• CVE-2013-2674Brother MFC-9970CDW 1.10 firmware L devices contain an infor…7.5
• CVE-2013-2675Brother MFC-9970CDW 1.10 devices with Firmware L contain a F…6.5
• CVE-2013-2676Brother MFC-9970CDW 1.10 firmware L devices contain an infor…7.5
• CVE-2013-2678Cisco Linksys E4200 1.0.05 Build 7 routers contain a Local F…8.1
• CVE-2013-2680Cisco Linksys E4200 1.0.05 Build 7 devices store passwords i…7.5
• CVE-2013-2681Cisco Linksys E4200 1.0.05 Build 7 devices contain a Securit…9.8
• CVE-2013-2682Cisco Linksys E4200 1.0.05 Build 7 devices contain a Clickja…4.3
• CVE-2013-2683Cisco Linksys E4200 1.0.05 Build 7 devices contain an Inform…5.3
• CVE-2013-2684Cross-site Scripting (XSS) in Cisco Linksys E4200 1.0.05 Bui…6.1
• CVE-2013-2685Stack-based buffer overflow in res/res_format_attr_h264.c in…