ZTE ZXDSL 831CII - Improper Access Restrictions

Exploit Title: ZTE ZXDSL 831 Unauthorized Configuration Access Date: 27/11/2017 Exploit Author: Ibad Shah Vendor Homepage: zte.com.cn Software Link: - Version: - ZXDSL - 831CII Tested on: Windows 10 CVE :- 2017-16953 ======================================= The Router usually servers html files &...

ZTE ZXDSL 831 Unauthorized Configuration Access Bypass

Exploit Title: ZTE ZXDSL 831 Unauthorized Configuration Access Date: 27/11/2017 Exploit Author: Ibad Shah Vendor Homepage: zte.com.cn Software Link: - Version: - ZXDSL - 831CII Tested on: Windows 10 CVE :- 2017-16953 ======================================= The Router usually servers html files &...

CVE-2014-9021

Multiple cross-site scripting XSS vulnerabilities in ZTE ZXDSL 831 allow remote attackers to inject arbitrary web script or HTML via the 1 tr69cAcsURL, 2 tr69cAcsUser, 3 tr69cAcsPwd, 4 tr69cConnReqPwd, or 5 tr69cDebugEnable parameter to the TR-069 client page tr69cfg.cgi; the 6 timezone parameter...

CVE-2014-9020

Cross-site scripting XSS vulnerability in the Quick Stats page psilan.cgi in ZTE ZXDSL 831 and 831CII allows remote attackers to inject arbitrary web script or HTML via the domainname parameter in a save action. NOTE: this issue was SPLIT from CVE-2014-9021 per ADT1 due to different affected...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ZTE ZXDSL 831 allow remote attackers to inject arbitrary web script or HTML via the 1 tr69cAcsURL, 2 tr69cAcsUser, 3 tr69cAcsPwd, 4 tr69cConnReqPwd, or 5 tr69cDebugEnable parameter to the TR-069 client page tr69cfg.cgi; the 6 timezone parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in the Quick Stats page psilan.cgi in ZTE ZXDSL 831 and 831CII allows remote attackers to inject arbitrary web script or HTML via the domainname parameter in a save action. NOTE: this issue was SPLIT from CVE-2014-9021 per ADT1 due to different affected...

CVE-2014-9020

CVE-2014-9020 is an XSS vulnerability affecting ZTE ZXDSL 831 and 831CII devices in the Quick Stats page (psilan.cgi). The vulnerability arises from insufficient input validation on the domainname parameter in the save action, allowing remote attackers to inject arbitrary web script or HTML. This...

CVE-2014-9020

Cross-site scripting XSS vulnerability in the Quick Stats page psilan.cgi in ZTE ZXDSL 831 and 831CII allows remote attackers to inject arbitrary web script or HTML via the domainname parameter in a save action. NOTE: this issue was SPLIT from CVE-2014-9021 per ADT1 due to different affected...

CVE-2014-9021

Multiple cross-site scripting XSS vulnerabilities in ZTE ZXDSL 831 allow remote attackers to inject arbitrary web script or HTML via the 1 tr69cAcsURL, 2 tr69cAcsUser, 3 tr69cAcsPwd, 4 tr69cConnReqPwd, or 5 tr69cDebugEnable parameter to the TR-069 client page tr69cfg.cgi; the 6 timezone parameter...

CVE-2014-9020: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Quick Stats page psilan.cgi in ZTE ZXDSL 831 and 831CII allows remote attackers to inject arbitrary web script or HTML via the domainname parameter in a save action. NOTE: this issue was SPLIT from CVE-2014-9021 per ADT1 due to different affected...

CVE-2014-9021: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in ZTE ZXDSL 831 allow remote attackers to inject arbitrary web script or HTML via the 1 tr69cAcsURL, 2 tr69cAcsUser, 3 tr69cAcsPwd, 4 tr69cConnReqPwd, or 5 tr69cDebugEnable parameter to the TR-069 client page tr69cfg.cgi; the 6 timezone parameter...

ZTE ZXDSL 831 Multiple Cross Site Scripting Vulnerability

Exploit for hardware platform in category web applications Exploit Title: ZTE ZXDSL 831 Multiple Cross Site Scripting Date: 11/3/2014 Exploit Author: Paulos Yibelo Vendor Homepage: zte.com.cn Software Link: - Version: - Tested on: Windows 7 CVE :- TR-069 Client page: Stored. executes when users g...

ZTE ZXDSL 831 Cross Site Scripting

Exploit Title: ZTE ZXDSL 831 Multiple Cross Site Scripting Date: 11/3/2014 Exploit Author: Paulos Yibelo Vendor Homepage: zte.com.cn Software Link: - Version: - Tested on: Windows 7 CVE :- TR-069 Client page: Stored. executes when users go to http://192.168.1.1/tr69cfg.html...

ZTE ZXDSL 831 II V7.5.0a_Z29_OV Update config / restore default

Exploit for hardware platform in category web applications Exploit Title: ZTE ZXDSL 831 II V7.5.0aZ29OV Update config / restoredefault Date: 04/09/2012 Author: The Black Devils Home: 1337day Exploit DataBase 1337day.com hardwarelink : N / A Category : webapps Google dork: N / A Tested on: Windows...

ZTE ZXDSL 831 II V7.5.0a_Z29_OV Change admin password

Exploit for hardware platform in category web applications Exploit Title: ZTE Change admin password Author: Nuevo Asesino Version: ZTE Inc., Software Release ZXDSL 831IIV7.5.0aZ29OV Exploit By Nuevo Asesino password ====== 123456 Now you can get the username & the password...

ZTE ZXDSL 831 II Modem Arbitrary Configuration Access Vulnerability

Exploit for hardware platform in category remote exploits =================================================================== ZTE ZXDSL 831 II Modem Arbitrary Configuration Access Vulnerability ===================================================================...