CVE-2023-25651 — SQL Injection Vulnerability in Some ZTE Mobile Internet Products
There is a SQL injection vulnerability in some ZTE mobile internet products. Due to insufficient input validation of SMS interface parameter, an authenticated attacker could us…
Published: 2023-12-14 · CVSS: 4.3 · CVSS 3.1
There is a SQL injection vulnerability in some ZTE mobile internet products. Due to insufficient input validation of SMS interface parameter, an authenticated attacker could use the vulnerability to execute SQL injection and cause information leak.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7