EUVD-2018-19087

Malware in sbrugna...

ZTE MF65 and ZTE MF65M1 Cross-Site Scripting Vulnerability

The ZTE MF65 and ZTE MF65M1 are both wireless Internet access card products from ZTE Corporation ZTE of China. A cross-site scripting vulnerability exists in the ZTE MF65 version prior to V1.0.0B05 and the ZTE MF65M1 version prior to V1.0.0B02, which stems from the program failing to properly...

CVE-2018-7355

All versions up to V1.0.0B05 of ZTE MF65 and all versions up to V1.0.0B02 of ZTE MF65M1 are impacted by cross-site scripting vulnerability. Due to improper neutralization of input during web page generation, an attacker could exploit this vulnerability to conduct reflected XSS or HTML injection...

CVE-2018-7355

All versions up to V1.0.0B05 of ZTE MF65 and all versions up to V1.0.0B02 of ZTE MF65M1 are impacted by cross-site scripting vulnerability. Due to improper neutralization of input during web page generation, an attacker could exploit this vulnerability to conduct reflected XSS or HTML injection...

Cross site scripting

All versions up to V1.0.0B05 of ZTE MF65 and all versions up to V1.0.0B02 of ZTE MF65M1 are impacted by cross-site scripting vulnerability. Due to improper neutralization of input during web page generation, an attacker could exploit this vulnerability to conduct reflected XSS or HTML injection...

CVE-2018-7355

All versions up to V1.0.0B05 of ZTE MF65 and all versions up to V1.0.0B02 of ZTE MF65M1 are impacted by cross-site scripting vulnerability. Due to improper neutralization of input during web page generation, an attacker could exploit this vulnerability to conduct reflected XSS or HTML injection...

CVE-2018-7355

The CVE-2018-7355 entry concerns a cross-site scripting vulnerability in ZTE MF65 and MF65M1 devices (firmware up to V1.0.0B05 and V1.0.0B02, respectively). The root cause is improper neutralization/filtering of input during web page generation, specifically in the goform_get_cmd_process page whe...