15 matches found
EUVD-2018-9067
Malware in sbrugna...
The vulnerability of the Wizard component in the microprogramming software of the RICOH Aficio MP multifunctional device allows a hacker to inject any code into the protected web page.
The vulnerability of the Wizard component file /web/entry/en/address/adrsSetUserWizard.cgi of the RICOH Aficio MP multifunctional device exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary code into...
RICOH Aficio MP 301 Cross-Site Scripting Vulnerability
The RICOH Aficio MP 301 is a multifunction printer device from Ricoh Japan. A cross-site scripting vulnerability exists in the address add area in the RICOH Aficio MP 301. A remote attacker can exploit this vulnerability by sending the 'entryNameIn' parameter to the...
CVE-2018-17312
On the RICOH Aficio MP 301 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi...
Cross site scripting
On the RICOH Aficio MP 301 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi...
CVE-2018-17312
On the RICOH Aficio MP 301 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi...
CVE-2018-17312
CVE-2018-17312 affects the Ricoh Aficio MP 301 printer. The vulnerability is HTML Injection and Stored XSS in the address-adding function, triggered via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi. Public references corroborate Cross-Site Scripting in that area, with ...
CVE-2018-17314: Improper Neutralization of Input During Web Page Generation
On the RICOH Aficio MP 305+ printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi...
CVE-2018-17312: Improper Neutralization of Input During Web Page Generation
On the RICOH Aficio MP 301 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi...
RICOH MP 305+ Printer Cross Site Scripting Vulnerability
Exploit for hardware platform in category web applications Exploit Title: RICOH MP 305+ Printer - HTML Injection and Stored XSS Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.ricoh.com/ Hardware Link :...
RICOH Aficio MP 301 Printer Cross Site Scripting
Exploit Title: RICOH Aficio MP 301 Printer - HTML Injection and Stored XSS Date: 2018-09-21 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.ricoh.com/ Hardware Link :...
RICOH Aficio MP 301 Printer - Cross-Site Scripting Vulnerability
Exploit for hardware platform in category web applications Exploit Title: RICOH Aficio MP 301 Printer - Cross-Site Scripting Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.ricoh.com/ Hardware Link:...
PT-2018-1917
Name of the Vulnerable Software and Affected Versions RICOH Aficio MP 301 printer affected versions not specified Description A security issue has been found in the RICOH Aficio MP 301 printer, related to HTML Injection and Stored XSS vulnerabilities. This issue is located in the area of adding...
PT-2018-1949
Name of the Vulnerable Software and Affected Versions RICOH Aficio MP versions affected versions not specified Description The issue exists due to inadequate protection of the web page structure in the RICOH Aficio MP's microprogram component Wizard, specifically in the...
