CVE-2015-7252

The CVE-2015-7252 entry describes a reflected XSS in the ZTE ZXHN H108N R1A (and affected W300) devices’ webproc CGI, via the errorpage parameter. The vulnerability allows remote injection of script/HTML and could enable session-related issues or credential exposure as part of broader multi-CVE f...

ZTE ZXHN H108N R1A ZXV10 W300 Routers - Multiple Vulnerabilities

ZTE ZXHN H108N R1A ZXV10 W300 Routers - Multiple Vulnerabilities Exploit Title: ZTE ZXHN H108N R1A + ZXV10 W300 routers - multiple vulnerabilities Discovered by: Karn Ganeshen CERT VU 391604 Vendor Homepage: www.zte.com.cn Versions Reported ZTE ZXHN H108N R1A - Software version ZTE.bhs.ZXHNH108NR...