CVE-2018-17311

CVE-2018-17311 affects the Ricoh MP C6503 Plus web interface, specifically the /web/entry/en/address/adrsSetUserWizard.cgi endpoint. The vulnerability is HTML Injection and Stored XSS via the entryNameIn parameter when adding addresses, enabling arbitrary script/HTML execution in the affected UI....

CVE-2018-17311: Improper Neutralization of Input During Web Page Generation

On the RICOH MP C6503 Plus printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi...

RICOH MP C6503 Plus Printer Cross Site Scripting

Exploit Title: RICOH MP C6503 Plus Printer - HTML Injection and Stored XSS Date: 2018-09-21 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.ricoh.com/ Hardware Link :...