Lucene search
+L

7 matches found

CNVD
CNVD
•added 2022/11/24 12:00 a.m.•74 views

ZTE MF286R SQL Injection Vulnerability

The ZTE MF286R is a wireless router from ZTE Corporation China.A SQL injection vulnerability exists in previous versions of the ZTE MF286R mf286rb07, which stems from insufficient validation of the input parameters of the phonebook interface. An authenticated attacker could use this vulnerability...

8.8CVSS4.4AI score0.26542EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2022/11/22 5:15 p.m.•23 views

CVE-2022-39066

There is a SQL injection vulnerability in ZTE MF286R. Due to insufficient validation of the input parameters of the phonebook interface, an authenticated attacker could use the vulnerability to execute arbitrary SQL injection...

8.8CVSS6.1AI score0.26542EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2022/11/22 12:00 a.m.•25 views

ZTE MF286R SQL注入漏洞

The ZTE MF286R is a wireless router from ZTE Corporation China.A SQL injection vulnerability exists in previous versions of the ZTE MF286R mf286rb07, which stems from insufficient validation of the input parameters of the phonebook interface. An authenticated attacker could use this vulnerability...

8.8CVSS7.9AI score0.26542EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2022/11/22 12:00 a.m.•12 views

CVE-2022-39066

There is a SQL injection vulnerability in ZTE MF286R. Due to insufficient validation of the input parameters of the phonebook interface, an authenticated attacker could use the vulnerability to execute arbitrary SQL injection...

9AI score0.26542EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/22 12:00 a.m.•3 views

CVE-2022-39066: Improper Neutralization of Special Elements used in an SQL Command

There is a SQL injection vulnerability in ZTE MF286R. Due to insufficient validation of the input parameters of the phonebook interface, an authenticated attacker could use the vulnerability to execute arbitrary SQL injection...

8.8CVSS6.4AI score0.26542EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2022/11/22 12:00 a.m.•49 views

CVE-2022-39066

There is a SQL injection vulnerability in ZTE MF286R. Due to insufficient validation of the input parameters of the phonebook interface, an authenticated attacker could use the vulnerability to execute arbitrary SQL injection...

9.2AI score0.26542EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2022/11/22 12:00 a.m.•29 views

PT-2022-24708 · Zte · Zte Mf286R

Name of the Vulnerable Software and Affected Versions: ZTE MF286R affected versions not specified Description: The issue is related to a SQL injection vulnerability due to insufficient validation of the input parameters of the phonebook interface. An authenticated attacker could use this to execu...

8.8CVSS8.3AI score0.26542EPSS
SaveExploits1References8
Rows per page
Query Builder