Lucene search
K

6 matches found

CNVD
CNVD
added 2022/11/24 12:0 a.m.34 views

ZTE MF286R SQL Injection Vulnerability

The ZTE MF286R is a wireless router from ZTE Corporation China.A SQL injection vulnerability exists in previous versions of the ZTE MF286R mf286rb07, which stems from insufficient validation of the input parameters of the phonebook interface. An authenticated attacker could use this vulnerability...

8.8CVSS4.4AI score0.48517EPSS
Exploits1References1
OSV
OSV
added 2022/11/22 5:15 p.m.1 views

CVE-2022-39066

There is a SQL injection vulnerability in ZTE MF286R. Due to insufficient validation of the input parameters of the phonebook interface, an authenticated attacker could use the vulnerability to execute arbitrary SQL injection...

8.8CVSS6.1AI score
Exploits0References1
Cvelist
Cvelist
added 2022/11/22 12:0 a.m.13 views

CVE-2022-39066

There is a SQL injection vulnerability in ZTE MF286R. Due to insufficient validation of the input parameters of the phonebook interface, an authenticated attacker could use the vulnerability to execute arbitrary SQL injection...

9.2AI score0.48517EPSS
Exploits1References1
CNNVD
CNNVD
added 2022/11/22 12:0 a.m.0 views

ZTE MF286R SQL注入漏洞

The ZTE MF286R is a wireless router from ZTE Corporation China.A SQL injection vulnerability exists in previous versions of the ZTE MF286R mf286rb07, which stems from insufficient validation of the input parameters of the phonebook interface. An authenticated attacker could use this vulnerability...

8.8CVSS7.9AI score0.48517EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2022/11/22 12:0 a.m.3 views

PT-2022-24708 · Zte · Zte Mf286R

Name of the Vulnerable Software and Affected Versions: ZTE MF286R affected versions not specified Description: The issue is related to a SQL injection vulnerability due to insufficient validation of the input parameters of the phonebook interface. An authenticated attacker could use this to execu...

8.8CVSS8.3AI score0.48517EPSS
Exploits1References8
Vulnrichment
Vulnrichment
added 2022/11/22 12:0 a.m.6 views

CVE-2022-39066

There is a SQL injection vulnerability in ZTE MF286R. Due to insufficient validation of the input parameters of the phonebook interface, an authenticated attacker could use the vulnerability to execute arbitrary SQL injection...

9AI score0.48517EPSS
Exploits1References1
Rows per page
Query Builder