medium6.1Public exploit code
CVE-2015-7252
Cross-site scripting (XSS) vulnerability in cgi-bin/webproc on ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allows remote attackers to inject ar…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ZTE ZXHN H108N R1A / ZXV10 W300 Routers - Multiple Vulnerabilities2015-11-20 · webapps · hardware
Impact
Cross-site scripting (XSS) vulnerability in cgi-bin/webproc on ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allows remote attackers to inject arbitrary web script or HTML via the errorpage parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zte | Zxhn H108n R1a Firmware | through zte.bhs.zxhnh108nr1a.h_pe |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/77421
- https://www.exploit-db.com/exploits/38773/
- https://www.kb.cert.org/vuls/id/391604
- https://www.kb.cert.org/vuls/id/BLUU-9ZDJWA
- http://www.securityfocus.com/bid/77421
- https://www.exploit-db.com/exploits/38773/
- https://www.kb.cert.org/vuls/id/391604
- https://www.kb.cert.org/vuls/id/BLUU-9ZDJWA