description: SQL injection vulnerability in all versions prior to V2.01.05.09 of the ZTE ZXIPTV-UCM product allows remote attackers to execute arbitrary SQL commands via the opertype parameter, resulting in the disclosure of database information.
problem types: SQL injection
affected:
{
product: ZXIPTV-UCM
vendor: ZTE
versions:
status: affected, version: All versions prior to V2.01.05.09
}