Collected research

Phil Purviance -- Don't Use Linksys Routers

Don't Use Linksys Routers

Five Linksys flaws disclosed after Cisco's patch fixed only an unrelated XSS: the WRT54GL still accepts cross-site firmware upload, and the EA2700 has XSS on apply.cgi, unauthenticated path traversal reading /etc/passwd, a CSRF that enables remote management and resets the admin password, and source disclosure by appending a slash to any admin URL.

Record

Document

Don't Use Linksys Routers

Published by

Superevr

Topic

Other

In the archive

• Collected in the 2013 research round

Related sources

• Blended Threats and JavaScript

Tags

• csrf
• xss
• path-traversal
• file-upload
• info-leak
• owasp-a01-2021
• owasp-a03-2021

This page is the archive's own catalogue record. The research is the work of Superevr, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 9 August 2026.