CVE-2008-1253: D-Link DSL-g604t

Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in cgi-bin/webcm on the D-Link DSL-G604T router allows remote attackers to inject arbitrary web script or HTML via the var:category parameter, as demonstrated by a request for advanced/portforw.htm on the fwan page.

Affected products

• D-Link DSL-g604t: any version

Published 2008-03-10. Last modified 2026-06-16.