CVE-2018-17167

PrinterOn Enterprise 4.1.4 suffers from multiple authenticated stored XSS vulnerabilities via the 1 "Machine Host Name" or "Server Serial Number" field in the clustering configuration, 2 "name" field in the Edit Group configuration, 3 "Rule Name" field in the Access Control configuration, 4...

CVE-2018-17167

CVE-2018-17167 affects PrinterOn Enterprise 4.1.4. The vulnerability is described as multiple authenticated stored XSS flaws in the web UI: (1) Machine Host Name or Server Serial Number field in clustering, (2) name in Edit Group, (3) Rule Name in Access Control, (4) Service Name in Service Confi...

CVE-2018-19936

PrinterOn Enterprise 4.1.4 allows Arbitrary File Deletion...

CVE-2018-19936

PrinterOn Enterprise 4.1.4 allows Arbitrary File Deletion...

Arbitrary file deletion

PrinterOn Enterprise 4.1.4 allows Arbitrary File Deletion...

CVE-2018-19936

PrinterOn Enterprise 4.1.4 allows Arbitrary File Deletion...

CVE-2018-19936

PrinterOn Enterprise 4.1.4 is affected by CVE-2018-19936, described as Arbitrary File Deletion. The vulnerability is evidenced by multiple sources (NVD entry; exploit-db; PacketStorm; PRION listing) and concrete details in the connected documents point to the affected software being PrinterOn Ent...

PrinterOn Enterprise 4.1.4 Arbitrary File Deletion

Exploit Author: bzyo CVE: CVE-2018-19936 Twitter: @bzyo Exploit Title: PrinterOn Enterprise 4.1.4 - Arbitrary File Deletion Date: 12-07-18 Vulnerable Software: PrinterOn Enterprise 4.1.4 Vendor Homepage: https://www.printeron.com/ Version: 4.1.4 Tested On...

PrinterOn Enterprise 4.1.4 - Arbitrary File Deletion Vulnerability

Exploit for multiple platform in category web applications Exploit Author: bzyo CVE: CVE-2018-19936 Twitter: @bzyo Exploit Title: PrinterOn Enterprise 4.1.4 - Arbitrary File Deletion Date: 12-07-18 Vulnerable Software: PrinterOn Enterprise 4.1.4 Vendor Homepage: https://www.printeron.com/ Version...

PrinterOn Enterprise 4.1.4 - Arbitrary File Deletion

PrinterOn Enterprise 4.1.4 - Arbitrary File Deletion Exploit Author: bzyo CVE: CVE-2018-19936 Twitter: @bzyo Exploit Title: PrinterOn Enterprise 4.1.4 - Arbitrary File Deletion Date: 12-07-18 Vulnerable Software: PrinterOn Enterprise 4.1.4 Vendor Homepage: https://www.printeron.com/ Version: 4.1....

PrinterOn Enterprise 4.1.4 - Arbitrary File Deletion

Exploit Author: bzyo CVE: CVE-2018-19936 Twitter: @bzyo Exploit Title: PrinterOn Enterprise 4.1.4 - Arbitrary File Deletion Date: 12-07-18 Vulnerable Software: PrinterOn Enterprise 4.1.4 Vendor Homepage: https://www.printeron.com/ Version: 4.1.4 Tested On...

PrinterOn Detection

Detection of PrinterOn. The script sends a connection request to the server and attempts to detect PrinterOn and to extract its version. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

CVE-2018-10327

PrinterOn Enterprise 4.1.3 stores the Active Directory bind credentials using base64 encoding, which allows local users to obtain credentials for a domain user by reading the cpsconfig.xml file...

Directory traversal

PrinterOn Enterprise 4.1.3 stores the Active Directory bind credentials using base64 encoding, which allows local users to obtain credentials for a domain user by reading the cpsconfig.xml file...

CVE-2018-10326

PrinterOn Enterprise 4.1.3 suffers from multiple authenticated stored XSS vulnerabilities via the 1 department field in the printer configuration, 2 description field in the print server configuration, and 3 username field for authentication to print as guest...

CVE-2018-10327

PrinterOn Enterprise 4.1.3 stores the Active Directory bind credentials using base64 encoding, which allows local users to obtain credentials for a domain user by reading the cpsconfig.xml file...

Cross site scripting

PrinterOn Enterprise 4.1.3 suffers from multiple authenticated stored XSS vulnerabilities via the 1 department field in the printer configuration, 2 description field in the print server configuration, and 3 username field for authentication to print as guest...

CVE-2018-10327

PrinterOn Enterprise 4.1.3 stores Active Directory bind credentials using base64 encoding in cps_config.xml, allowing a local user to read credentials for a domain user. Affected: PrinterOn Enterprise 4.1.3; root cause: credentials are stored in base64 (not encrypted). Impact: potential credentia...

CVE-2018-10326

PrinterOn Enterprise 4.1.3 suffers from multiple authenticated stored XSS vulnerabilities via the 1 department field in the printer configuration, 2 description field in the print server configuration, and 3 username field for authentication to print as guest...

CVE-2018-10326

PrinterOn Enterprise 4.1.3 is affected by multiple authenticated stored XSS vulnerabilities: (1) department field in printer configuration, (2) description field in the print server configuration, and (3) username field for authentication to print as guest. No remediation or exploit details are p...