Skip to content
OpenAdvisories
Unscored CVE-2017-10937 EUVD-2017-2575GHSA-686c-mw6p-m43v

SQL injection vulnerability in all versions prior to V2.01.05.09 of the ZTE ZXIPTV-UCM product allows remote attackers to execute arbitrary…

Published Jul 25, 2018 · Updated Sep 17, 2024 · Assigned by zte

Vendor: ZTE Product: ZXIPTV-UCM

Description

SQL injection vulnerability in all versions prior to V2.01.05.09 of the ZTE ZXIPTV-UCM product allows remote attackers to execute arbitrary SQL commands via the opertype parameter, resulting in the disclosure of database information.

Affected products

VendorProductAffectedFixed
ZTE ZXIPTV-UCM All versions prior to V2.01.05.09 —

References