Cross site request forgery (csrf)

Xerox AltaLink C8035 printers allow CSRF. A request to add users is made in the Device User Database form field to the xerox.set URI. The frmUserName value must have a unique name...

CVE-2019-19832

Xerox AltaLink C8035 printers allow CSRF. A request to add users is made in the Device User Database form field to the xerox.set URI. The frmUserName value must have a unique name...

CVE-2019-19832

CVE-2019-19832 affects Xerox AltaLink C8035 printers and is due to a Cross-Site Request Forgery (CSRF) flaw in the Web application. The vulnerability allows an attacker to trigger a request to add users via the xerox.set URI in the Device User Database form, requiring that the frmUserName value b...

Xerox AltaLink C8035 Printer Cross-Site Request Forgery Vulnerability

The Xerox AltaLink C8035 is a multifunction printer from Xerox USA. A cross-site request forgery vulnerability exists in the Xerox AltaLink C8035. The vulnerability stems from the WEB application not adequately verifying that the request is from a trusted user. An attacker could use this...

PT-2019-15974

Name of the Vulnerable Software and Affected Versions Xerox AltaLink C8035 printers affected versions not specified Description The issue allows for Cross-Site Request Forgery CSRF attacks. It involves making a request to add users via the Device User Database form field to the "xerox.set" URI. T...

Xerox AltaLink C8035 Printer - Cross-Site Request Forgery (Add Admin)

Xerox AltaLink C8035 Printer - Cross-Site Request Forgery Add Admin Exploit Title: Xerox AltaLink C8035 Printer - Cross-Site Request Forgery Add Admin Date: 2018-12-17 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.xerox.com/ Hardware Link :...

CVE-2019-19832: Cross-Site Request Forgery (CSRF)

Xerox AltaLink C8035 printers allow CSRF. A request to add users is made in the Device User Database form field to the xerox.set URI. The frmUserName value must have a unique name...

Xerox AltaLink C8035 Printer - Cross-Site Request Forgery (Add Admin)

Exploit Title: Xerox AltaLink C8035 Printer - Cross-Site Request Forgery Add Admin Date: 2018-12-17 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.xerox.com/ Hardware Link : https://www.office.xerox.com/en-us/multifunction-printers/altalink-c8000-series Software : Xerox Printer...

Xerox AltaLink C8035 Printer Cross Site Request Forgery Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Xerox AltaLink C8035 Printer - Cross-Site Request Forgery Add Admin Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.xerox.com/ Hardware Link :...

Xerox AltaLink C8035 Printer Cross Site Request Forgery

Exploit Title: Xerox AltaLink C8035 Printer - Cross-Site Request Forgery Add Admin Date: 2018-12-17 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.xerox.com/ Hardware Link : https://www.office.xerox.com/en-us/multifunction-printers/altalink-c8000-series Software : Xerox Printer...

Command Injection Vulnerability in Multiple Fuji Xerox Products

Fuji Xerox AltaLink B80xx and others are multifunction printer devices from Fuji Xerox, Japan. A command injection vulnerability exists in the web application program interface in multiple Fuji Xerox products. No details of the vulnerability are provided at this time...

Xerox AltaLink Printers Multiple Vulnerabilities

Xerox AltaLink Printers are prone to multiple vulnerabilities. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

CVE-2018-17172

The web application on Xerox AltaLink B80xx before 100.008.028.05200, C8030/C8035 before 100.001.028.05200, C8045/C8055 before 100.002.028.05200, and C8070 before 100.003.028.05200 allows unauthenticated command injection...

Command injection

The web application on Xerox AltaLink B80xx before 100.008.028.05200, C8030/C8035 before 100.001.028.05200, C8045/C8055 before 100.002.028.05200, and C8070 before 100.003.028.05200 allows unauthenticated command injection...

CVE-2018-17172

The web application on Xerox AltaLink B80xx before 100.008.028.05200, C8030/C8035 before 100.001.028.05200, C8045/C8055 before 100.002.028.05200, and C8070 before 100.003.028.05200 allows unauthenticated command injection...

CVE-2018-17172

The web application on Xerox AltaLink B80xx before 100.008.028.05200, C8030/C8035 before 100.001.028.05200, C8045/C8055 before 100.002.028.05200, and C8070 before 100.003.028.05200 allows unauthenticated command injection...

CVE-2018-17172

The CVE-2018-17172 issue affects Xerox AltaLink B80xx family devices (and related models) with firmware versions before specific fixes: B80xx before 100.008.028.05200, C8030/C8035 before 100.001.028.05200, C8045/C8055 before 100.002.028.05200, and C8070 before 100.003.028.05200. The web applicati...

PT-2019-9404

Name of the Vulnerable Software and Affected Versions Xerox AltaLink B80xx versions prior to 100.008.028.05200 Xerox C8030/C8035 versions prior to 100.001.028.05200 Xerox C8045/C8055 versions prior to 100.002.028.05200 Xerox C8070 versions prior to 100.003.028.05200 Description The issue allows...

CVE-2018-17172: Improper Neutralization of Special Elements used in a Command

The web application on Xerox AltaLink B80xx before 100.008.028.05200, C8030/C8035 before 100.001.028.05200, C8045/C8055 before 100.002.028.05200, and C8070 before 100.003.028.05200 allows unauthenticated command injection...