Cross site scripting

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by cross-site scripting vulnerability XSS. Due to incomplete input validation, an authorized user can exploit this vulnerability to execute malicious scripts...

PT-2019-16569 · Zte · Zte Zxhn F670

Name of the Vulnerable Software and Affected Versions: ZTE ZXHN F670 versions prior to V1.1.10P3T18 Description: The issue is related to a command injection vulnerability due to insufficient parameter validation check. This allows an authorized user to exploit the vulnerability and take control o...