Lucene search
PRIOn knowledge basePRION:CVE-2023-25651HistoryDec 14, 2023 - 7:15 a.m.
Sql injection
2023-12-1407:15:00
PRIOn knowledge base
www.prio-n.com
5
sql injection
zte
mobile internet
information leak
nvd
insufficient input validation
sms interface parameter
There is a SQL injection vulnerability in some ZTE mobile internet products. Due to insufficient input validation of SMS interface parameter, an authenticated attacker could use the vulnerability to execute SQL injection and cause information leak.
| CPE | Name | Operator | Version |
|---|---|---|---|
| mf286r_firmware | eq | cr-lvwrgbmf286rv1.0.0b4 | |
| mf833u1_firmware | eq | bd-mf833u1v1.0.0b1 |
