RICOH MP C2003 Cross-site Scripting (CVE-2018-17315)

On the RICOH MP C2003 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi. This plugin only works with Tenable.ot. Please visit...

RICOH SP 4510SF Printer HTML Injection

Exploit Title: RICOH SP 4510SF Printer - HTML Injection Date: 2019-05-06 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.ricoh.com/ Hardware Link: http://support.ricoh.com/bb/html/drute/re1/model/sp4510/sp4510.htm Software: RICOH Printer Product Version: SP 4510SF Vulernability Type:...

PT-2019-15272

Name of the Vulnerable Software and Affected Versions RICOH MP 501 printer affected versions not specified Description A security issue has been found in the RICOH MP 501 printer, specifically in the process of adding addresses. This issue involves HTML Injection and Stored XSS vulnerabilities. T...

PT-2019-12527

Name of the Vulnerable Software and Affected Versions RICOH SP 4510DN affected versions not specified Description An HTML Injection issue has been found. It affects the /web/entry/en/address/adrsSetUserWizard.cgi API endpoint, specifically the entryNameIn parameter. Recommendations At the moment,...

CVE-2018-17315

On the RICOH MP C2003 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi...

CVE-2018-17313

On the RICOH MP C307 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi...

Cross site scripting

On the RICOH MP C6503 Plus printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi...

CVE-2018-17315: Improper Neutralization of Input During Web Page Generation

On the RICOH MP C2003 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi...

PT-2018-1920

Name of the Vulnerable Software and Affected Versions RICOH MP C6503 Plus printer affected versions not specified Description A security issue has been found in the RICOH MP C6503 Plus printer related to HTML Injection and Stored XSS vulnerabilities. This issue is associated with adding addresses...

PT-2018-1919

Name of the Vulnerable Software and Affected Versions RICOH MP versions affected versions not specified Description The issue exists due to inadequate protection of the web page structure in the Wizard component, specifically in the /web/entry/en/address/adrsSetUserWizard.cgi file. This allows a...

PT-2018-13822

Name of the Vulnerable Software and Affected Versions RICOH MP 2001 printer affected versions not specified Description A security issue has been found related to HTML Injection and Stored XSS in the process of adding addresses. This issue is associated with the entryNameIn parameter when accessi...

PT-2018-1916

Name of the Vulnerable Software and Affected Versions RICOH MP C2003 printer affected versions not specified Description A security issue has been found in the RICOH MP C2003 printer, related to HTML Injection and Stored XSS vulnerabilities. This issue is located in the area of adding addresses v...

PT-2018-1918

Name of the Vulnerable Software and Affected Versions RICOH MP versions affected versions not specified Description The issue exists due to inadequate protection of the web page structure in the Wizard component, specifically in the /web/entry/en/address/adrsSetUserWizard.cgi file. This allows a...

PT-2018-13821

Name of the Vulnerable Software and Affected Versions RICOH SP 4510SF printer affected versions not specified Description A security issue has been found related to HTML Injection and Stored XSS in the process of adding addresses. This issue is associated with the entryNameIn parameter used in th...