CVE-2015-7252

Cross-site scripting (XSS) vulnerability in cgi-bin/webproc on ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allows remote attackers to inject arbitrary web script or HTML via the errorpage parameter.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:zte:zxhn_h108n_r1a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:zte:zxhn_h108n_r1a:*:*:*:*:*:*:*:*

History

21 Nov 2024, 02:36

Type Values Removed Values Added
References () http://www.securityfocus.com/bid/77421 - () http://www.securityfocus.com/bid/77421 -
References () https://www.exploit-db.com/exploits/38773/ - () https://www.exploit-db.com/exploits/38773/ -
References () https://www.kb.cert.org/vuls/id/391604 - Third Party Advisory, US Government Resource () https://www.kb.cert.org/vuls/id/391604 - Third Party Advisory, US Government Resource
References () https://www.kb.cert.org/vuls/id/BLUU-9ZDJWA - Third Party Advisory, US Government Resource () https://www.kb.cert.org/vuls/id/BLUU-9ZDJWA - Third Party Advisory, US Government Resource

Information

Published : 2015-12-30 05:59

Updated : 2024-11-21 02:36


NVD link : CVE-2015-7252

Mitre link : CVE-2015-7252

CVE.ORG link : CVE-2015-7252


JSON object : View

Products Affected

zte

  • zxhn_h108n_r1a_firmware
  • zxhn_h108n_r1a
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')