Lucene search
+L

CVE-2015-7248

🗓️ 30 Dec 2015 02:00:00Reported by certccType 
cve
 cve
🔗 web.nvd.nist.gov👁 72 Views🌐 WEB

ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allow remote attackers to discover usernames and password hashes by reading the cgi-bin/webproc HTML source code

Related
Detection
Refs
Paths
NVD
Node
AND
ztezxhn_h108n_r1a_firmwareRangezte.bhs.zxhnh108nr1a.h_pe
ParameterPositionPathDescriptionCWE
getpagerequest bodycgi-bin/webprocInformation exposure via webproc that can reveal usernames and password hashes from page source or configuration files.CWE-200
errorpagerequest bodycgi-bin/webprocInformation exposure via webproc that can reveal usernames and password hashes from page source or configuration files.CWE-200
var:menurequest bodycgi-bin/webprocInformation exposure via webproc that can reveal usernames and password hashes from page source or configuration files.CWE-200
var:pagerequest bodycgi-bin/webprocInformation exposure via webproc that can reveal usernames and password hashes from page source or configuration files.CWE-200
var:subpagerequest bodycgi-bin/webprocInformation exposure via webproc that can reveal usernames and password hashes from page source or configuration files.CWE-200
obj-actionrequest bodycgi-bin/webprocInformation exposure via webproc that can reveal usernames and password hashes from page source or configuration files.CWE-200
%3Ausernamerequest bodycgi-bin/webprocInformation exposure via webproc that can reveal usernames and password hashes from page source or configuration files.CWE-200
%3Apasswordrequest bodycgi-bin/webprocInformation exposure via webproc that can reveal usernames and password hashes from page source or configuration files.CWE-200
%3Aactionrequest bodycgi-bin/webprocInformation exposure via webproc that can reveal usernames and password hashes from page source or configuration files.CWE-200
sessionidrequest bodycgi-bin/webprocInformation exposure via webproc that can reveal usernames and password hashes from page source or configuration files.CWE-200
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 00:32Current
7.8High risk
Vulners AI Score7.8
CVSS 25
CVSS 37.5
EPSS0.06897
72