CVE-2026-1769-WriteUp

CVE-2026-1769 — Stored XSS in Xerox CentreWare Web Disclosure timeline and technical write-up for CVE-2026-1769 , a Stored Cross-Site Scripting vulnerability I identified and responsibly disclosed to Xerox. CVE record: cve.org/CVERecord?id=CVE-2026-1769 Vendor security bulletin: XRX26-003 CWE:...

Exploit for Cross-site Scripting in Xerox Centreware_Web

CVE-2026-1769 — Stored XSS in Xerox CentreWare Web Disclosure...

Xerox CentreWare Web 7.0.6 Cross Site Scripting

Xerox CentreWare Web version 7.0.6 contains a stored cross site scripting vulnerability...

CVE-2026-1769

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Xerox CentreWare on Windows allows Stored XSS.This issue affects CentreWare: through 7.0.6. Consider upgrading Xerox® CentreWare Web® to v7.2.2.25 via the software available on Xerox.com...

CVE-2026-1769

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Xerox CentreWare on Windows allows Stored XSS.This issue affects CentreWare: through 7.0.6. Consider upgrading Xerox® CentreWare Web® to v7.2.2.25 via the software available on Xerox.com...

CVE-2026-1769

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Xerox CentreWare on Windows allows Stored XSS.This issue affects CentreWare: through 7.0.6. Consider upgrading Xerox® CentreWare Web® to v7.2.2.25 via the software available on Xerox.com...

CVE-2026-1769 Stored XSS on Xerox CentreWare Web 7.0.6

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Xerox CentreWare on Windows allows Stored XSS.This issue affects CentreWare: through 7.0.6. Consider upgrading Xerox® CentreWare Web® to v7.2.2.25 via the software available on Xerox.com...

CVE-2026-1769

Xerox CentreWare Web on Windows is affected by a Stored XSS in CentreWare Web versions through 7.0.6. The vulnerability arises from improper neutralization of input during web page generation, allowing malicious scripts to be stored and potentially executed in the context of other users’ sessions...

EUVD-2026-5635

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Xerox CentreWare on Windows allows Stored XSS.This issue affects CentreWare: through 7.0.6. Consider upgrading Xerox® CentreWare Web® to v7.2.2.25 via the software available on Xerox.com...

CVE-2026-1769 Stored XSS on Xerox CentreWare Web 7.0.6

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Xerox CentreWare on Windows allows Stored XSS.This issue affects CentreWare: through 7.0.6. Consider upgrading Xerox® CentreWare Web® to v7.2.2.25 via the software available on Xerox.com...

EUVD-2008-3112

Malware in sbrugna...

EUVD-2008-3111

Malware in sbrugna...

Xerox CentreWare Web < 4.6.46 Multiple Vulnerabilities (XRX08-008)

Xerox CentreWare Web, a web-based tool for IP printer management, is installed on the remote web server. According to its banner, the installed version of Xerox CentreWare Web reportedly contains three areas that are prone to SQL injection attacks, provided the attacker has valid credentials, and...

Sql injection

Multiple SQL injection vulnerabilities in Xerox CentreWare Web CWW before 4.6.46 allow remote authenticated users to execute arbitrary SQL commands via the unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Xerox CentreWare Web CWW before 4.6.46 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-3121

Multiple cross-site scripting XSS vulnerabilities in Xerox CentreWare Web CWW before 4.6.46 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-3122

Multiple SQL injection vulnerabilities in Xerox CentreWare Web CWW before 4.6.46 allow remote authenticated users to execute arbitrary SQL commands via the unspecified vectors...

CVE-2008-3122

Xerox CentreWare Web (CWW) before 4.6.46 is affected by multiple SQL injection vulnerabilities. Remote authenticated users can potentially execute arbitrary SQL commands via unspecified vectors. The issue is tied to the web-based IP printer management tool; affected component is the CWW applicati...

CVE-2008-3121

Xerox CentreWare Web (CWW) vulnerable to multiple cross-site scripting (XSS) flaws in versions prior to 4.6.46. Remote authenticated users can inject arbitrary script/HTML via unspecified vectors. Impact is partial integrity; no explicit exploitation details are provided. Remediation: upgrade to ...

CVE-2008-3121

Multiple cross-site scripting XSS vulnerabilities in Xerox CentreWare Web CWW before 4.6.46 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...