Security Advisory
CVE-2015-7252
6.1
MEDIUM
Vulnerability Description
Cross-site scripting (XSS) vulnerability in cgi-bin/webproc on ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allows remote attackers to inject arbitrary web script or HTML via the errorpage parameter.
Published Date
December 30, 2015
Official Source
NIST NVD Advisory