CVEs-PoC/2015/CVE-2015-7250.md

CVE-2015-7250

Description

Absolute path traversal vulnerability in cgi-bin/webproc on ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allows remote attackers to read arbitrary files via a full pathname in the getpage parameter.

POC

Reference

• https://www.exploit-db.com/exploits/38773/

Github

• https://github.com/ARPSyndicate/cve-scores