Exploit for SQL Injection in Zte Mf286R_Firmware

CVE-2022-39066 Firmware details: wainnerversion: BDPO...

CVE-2022-39066

There is a SQL injection vulnerability in ZTE MF286R. Due to insufficient validation of the input parameters of the phonebook interface, an authenticated attacker could use the vulnerability to execute arbitrary SQL injection...

CVE-2022-39066

CVE-2022-39066 affects ZTE MF286R. A SQL injection exists in the PHONE_BLOCK_ADD handler of the webserver goahead, caused by insufficient validation of phonebook input parameters. An authenticated attacker could perform arbitrary SQL injection, with actions described in the GitHub exploit (e.g., ...