Full title: ZTE MF253V 1.0.0B04 XSS / CSRF / Hardcoded Password Vulnerabilities Category: web applications Platform: hardware ZTE WLAN router MF253V version 1.0.0B04 suffers from cross site request forgery, hardcoded password, outdated component, and cross site scripting vulnerabilities. # 0day.today @ http://0day.today/