CVE-2018-17311

CVE-2018-17311 affects the Ricoh MP C6503 Plus web interface, specifically the /web/entry/en/address/adrsSetUserWizard.cgi endpoint. The vulnerability is HTML Injection and Stored XSS via the entryNameIn parameter when adding addresses, enabling arbitrary script/HTML execution in the affected UI....

CVE-2018-17311: Improper Neutralization of Input During Web Page Generation

On the RICOH MP C6503 Plus printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi...

RICOH MP C6503 Plus Printer Cross Site Scripting

Exploit Title: RICOH MP C6503 Plus Printer - HTML Injection and Stored XSS Date: 2018-09-21 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.ricoh.com/ Hardware Link :...

PT-2018-1920

Name of the Vulnerable Software and Affected Versions RICOH MP C6503 Plus printer affected versions not specified Description A security issue has been found in the RICOH MP C6503 Plus printer related to HTML Injection and Stored XSS vulnerabilities. This issue is associated with adding addresses...