Cross site scripting

Cross-site scripting XSS vulnerability in the Brother MFC-9970CDW printer with firmware G 1.03 and L 1.10 allows remote attackers to inject arbitrary web script or HTML via an arbitrary parameter name QUERYSTRING to admin/adminmain.html, a different vulnerability than CVE-2013-2507 and...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Brother MFC-9970CDW printer with firmware L 1.10 allow remote attackers to inject arbitrary web script or HTML via the 1 id or 2 val parameter to admin/adminmain.html; 3 id, 4 val, or 5 arbitrary parameter name QUERYSTRING to...

CVE-2013-2507

Multiple cross-site scripting XSS vulnerabilities in the Brother MFC-9970CDW printer with firmware G 1.03 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to admin/logtonet.html or 2 kind parameter to fax/copysettings.html, a different vulnerability than...

CVE-2013-2507

CVE-2013-2507 refers to XSS vulnerabilities in the Brother MFC-9970CDW printer. The affected product is the Brother MFC-9970CDW with firmware G (1.03). The vulnerabilities allow remote injection of arbitrary web script/HTML via specific parameters: (1) id in admin/log_to_net.html and (2) kind in ...

CVE-2013-2670

Cross-site scripting XSS vulnerability in the Brother MFC-9970CDW printer with firmware G 1.03 and L 1.10 allows remote attackers to inject arbitrary web script or HTML via an arbitrary parameter name QUERYSTRING to admin/adminmain.html, a different vulnerability than CVE-2013-2507 and...

CVE-2013-2671

Multiple cross-site scripting XSS vulnerabilities in the Brother MFC-9970CDW printer with firmware L 1.10 allow remote attackers to inject arbitrary web script or HTML via the 1 id or 2 val parameter to admin/adminmain.html; 3 id, 4 val, or 5 arbitrary parameter name QUERYSTRING to...

CVE-2013-2671

Summary: CVE-2013-2670, CVE-2013-2671, and CVE-2013-2507 describe cross-site scripting (XSS) vulnerabilities in the Brother MFC-9970CDW printer family. The NVD entries indicate affected firmware/builds include G (1.03) and L (1.10) across multiple CVEs. Vulnerable components include web UI endpoi...

CVE-2013-2670

The CVE-2013-2670 entry describes an XSS vulnerability in Brother MFC-9970CDW printers with firmware G (1.03) and L (1.10). The flaw allows remote attackers to inject arbitrary web script or HTML by supplying an arbitrary parameter name via QUERY_STRING to admin/admin_main.html. This is distinct ...

Interpretation of the Bible – exploits the intermediate level skills of analysis-vulnerability warning-the black bar safety net

Inscription: From the last update feel has been a long, long time, and what time less are excuses himself becomes the lazy's true, give us an apology, after the update will speed up, today do not speak the vulnerability analysis, with me to discuss the exploits of some of the principles on the...

Brother MFC-9970CDW Firmware 0D Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ========================================= Brother MFC-9970CDW Firmware 0D Date: Jan. 13, 2013 URL: http://www.cloudscan.me/2013/05/xss-javascript-injection-brother-mfc.html ========================================= Keywords...

Brother HL5370 Command Execution / Password Guessing

Tested on Brother HL5370 latest firmware so far, confirmed working against many others by Brother documentation From Brother .de website - http://qr.cx/zCt9 Syntax for PJL JOB command includes - "PASSWORD = password HL-1660e/2060/2400C/2400Ce/3400CN/1650/1670N/3260N/2460/7050/...

kesionCMS 8.0 background holding shell vulnerability-vulnerability warning-the black bar safety net

Some time ago Ghost brother, made a kesion arbitrary download vulnerability on the holding shell further generations. In fact, take the shell was very simple. Method of much is. Just a brother to me get a shell, I just made a to get the shell methods for your reference. The point of sql command...

Brother Bear SQL Injection

---------------------------------------------------------------- Brother Bear SQL Injection Vulnerability ---------------------------------------------------------------- Exploit Title : Brother Bear SQL Injection Vulnerability Author : Hack Center Security Team Discovered By : Net.W0lf Software...

Quest Software Big Brother Arbitrary File Deletion and Overwriting

Two directory traversal vulnerabilities have been reported in Quest Software's Big Brother. Big Brother is a network monitoring software, which enables administrators to monitor their organization's network activity. These vulnerabilities exist due to improper input validation in the application...

Quest Big Brother Remote File Overwrite

Added: 06/14/2011 BID: 47805 OSVDB: 72347 Background Quest Big Brother is server monitoring package. Problem The 'bbntd.exe' service of the Big Brother server version 4.40 and prior does not properly sanitize user requests and may allow an attacker to upload files using a directory traversal...

Quest Big Brother Remote File Overwrite

Added: 06/14/2011 BID: 47805 OSVDB: 72347 Background Quest Big Brother is server monitoring package. Problem The 'bbntd.exe' service of the Big Brother server version 4.40 and prior does not properly sanitize user requests and may allow an attacker to upload files using a directory traversal...

Quest Big Brother Remote File Overwrite

Added: 06/14/2011 BID: 47805 OSVDB: 72347 Background Quest Big Brother is server monitoring package. Problem The 'bbntd.exe' service of the Big Brother server version 4.40 and prior does not properly sanitize user requests and may allow an attacker to upload files using a directory traversal...

Quest Big Brother Remote File Overwrite

Added: 06/14/2011 BID: 47805 OSVDB: 72347 Background Quest Big Brother is server monitoring package. Problem The 'bbntd.exe' service of the Big Brother server version 4.40 and prior does not properly sanitize user requests and may allow an attacker to upload files using a directory traversal...

Brother HL-5370DW Printer 'post/panel.html' Security Bypass Vulnerability

The Brother HL-5370DW printer is prone to a security-bypass vulnerability. Remote attackers can exploit this issue to bypass security restrictions. OpenVAS Vulnerability Test $Id: gbbrotherhl5370DW48050.nasl 7024 2017-08-30 11:51:43Z teissa $ Brother HL-5370DW Printer 'post/panel.html' Security...

Brother HL-5370DW Printer 'post/panel.html' Security Bypass Vulnerability

The Brother HL-5370DW printer is prone to a security-bypass vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...