CVE-2018-7355 | BDVDB-2026-107409 Detail

ZTEMF65

Description#

All versions up to V1.0.0B05 of ZTE MF65 and all versions up to V1.0.0B02 of ZTE MF65M1 are impacted by cross-site scripting vulnerability. Due to improper neutralization of input during web page generation, an attacker could exploit this vulnerability to conduct reflected XSS or HTML injection attacks on the devices.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.exploit-db.com/exploits/46102/
http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1009483

Exploit#

https://www.exploit-db.com/exploits/46102/

History#

Version 12018-09-26Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.