CVE-2015-7250 | BDVDB-2026-73513 Detail

Description#

Absolute path traversal vulnerability in cgi-bin/webproc on ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allows remote attackers to read arbitrary files via a full pathname in the getpage parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/77421
https://www.kb.cert.org/vuls/id/BLUU-9ZDJWA
https://www.kb.cert.org/vuls/id/391604
https://www.exploit-db.com/exploits/38773/

Exploit#

https://www.exploit-db.com/exploits/38773/

History#

Version 12015-12-30Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.