HP LaserJet Printers Path Traversal (CVE-2010-4107)

The default configuration of the PJL Access value in the File System External Access settings on HP LaserJet MFP printers, Color LaserJet MFP printers, and LaserJet 4100, 4200, 4300, 5100, 8150, and 9000 printers enables PJL commands that use the device's filesystem, which allows remote attackers...

HP Laser Jet - JavaScript Persistent Cross-Site Scripting via PJL Directory Traversal

HP Laser Jet - JavaScript Persistent Cross-Site Scripting via PJL Directory Traversal !/usr/bin/perl use strict; use warnings; use IO::Socket::INET; my $host = $ARGV0; Exploit Title: HP Laser Jet Persistent Javascript Cross Site Scripting via PJL Google Dork: n/a Date: 4/22/14 Exploit Author:...

HP LaserJet printer PJL interface directory traversal vulnerability-vulnerability warning-the black bar safety net

HP LaserJet is HP printer, comprising a plurality of models. HP LaserJet to the MFP device in the PJL file system access interface there is a directory traversal vulnerability that could lead to sensitive information disclosure and is likely to be modified. This includes the background processing...

n.runs-SA-2010.003 - Hewlett Packard LaserJet MFP devices - Directory Traversal in PJL interface

n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2010.003 16-Nov-2010 Vendor: Hewlett-Packard, http://www.hp.com Affected Products: Various HP LaserJet MFP devices See HP advisory 3 for the complete list Vulnerability: Directory Traversal in PJL interface Risk: HIGH Vendor...

CVE-2010-4107

creationtimestamp| type| source ---|---|--- 2010-11-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15631...

CVE-2010-4107

CVE-2010-4107 affects HP LaserJet MFPs and select LaserJet models (e.g., 4100/4200/4300/5100/8150/9000) where the PJL File System External Access is misconfigured by default. The issue allows an attacker to read arbitrary files on the device by sending PJL directory traversal via a print job, lev...