80 matches found
CVE-2018-17168
PrinterOn Enterprise 4.1.4 contains multiple Cross Site Request Forgery CSRF vulnerabilities in the Administration page. For example, an administrator, by following a link, can be tricked into making unwanted changes to a printer Disable, Approve, etc...
Cross site request forgery (csrf)
PrinterOn Enterprise 4.1.4 contains multiple Cross Site Request Forgery CSRF vulnerabilities in the Administration page. For example, an administrator, by following a link, can be tricked into making unwanted changes to a printer Disable, Approve, etc...
CVE-2018-17168
PrinterOn Enterprise 4.1.4 contains multiple Cross Site Request Forgery CSRF vulnerabilities in the Administration page. For example, an administrator, by following a link, can be tricked into making unwanted changes to a printer Disable, Approve, etc...
CVE-2018-17168
PrinterOn Enterprise 4.1.4 contains multiple Cross Site Request Forgery CSRF vulnerabilities in the Administration page. For example, an administrator, by following a link, can be tricked into making unwanted changes to a printer Disable, Approve, etc...
CVE-2018-17168
PrinterOn Enterprise 4.1.4 is affected by multiple cross-site request forgery (CSRF) vulnerabilities in the Administration page. An attacker could lure an administrator to a link that triggers unauthorized admin actions, such as Disable or Approve printer settings. The root cause is CSRF in the a...
PT-2019-9401
Name of the Vulnerable Software and Affected Versions PrinterOn Enterprise version 4.1.4 Description The issue allows an attacker to trick an administrator into making unwanted changes to a printer, such as disabling or approving it, by following a malicious link. This is due to multiple Cross Si...
CVE-2018-17168: Cross-Site Request Forgery (CSRF)
PrinterOn Enterprise 4.1.4 contains multiple Cross Site Request Forgery CSRF vulnerabilities in the Administration page. For example, an administrator, by following a link, can be tricked into making unwanted changes to a printer Disable, Approve, etc...
CVE-2018-17167
PrinterOn Enterprise 4.1.4 suffers from multiple authenticated stored XSS vulnerabilities via the 1 "Machine Host Name" or "Server Serial Number" field in the clustering configuration, 2 "name" field in the Edit Group configuration, 3 "Rule Name" field in the Access Control configuration, 4...
Cross site scripting
PrinterOn Enterprise 4.1.4 suffers from multiple authenticated stored XSS vulnerabilities via the 1 "Machine Host Name" or "Server Serial Number" field in the clustering configuration, 2 "name" field in the Edit Group configuration, 3 "Rule Name" field in the Access Control configuration, 4...
PrinterOn Enterprise Cross-Site Scripting Vulnerability
PrinterOn Enterprise is a secure cloud printing solution from PrinterOn Canada. The solution supports printing from laptops, desktops and mobile devices connected to printers. A cross-site scripting vulnerability exists in PrinterOn Enterprise version 4.1.4, which stems from a lack of proper...
CVE-2018-17167
CVE-2018-17167 affects PrinterOn Enterprise 4.1.4. The vulnerability is described as multiple authenticated stored XSS flaws in the web UI: (1) Machine Host Name or Server Serial Number field in clustering, (2) name in Edit Group, (3) Rule Name in Access Control, (4) Service Name in Service Confi...
CVE-2018-17167
PrinterOn Enterprise 4.1.4 suffers from multiple authenticated stored XSS vulnerabilities via the 1 "Machine Host Name" or "Server Serial Number" field in the clustering configuration, 2 "name" field in the Edit Group configuration, 3 "Rule Name" field in the Access Control configuration, 4...
PT-2019-9400
Name of the Vulnerable Software and Affected Versions PrinterOn Enterprise version 4.1.4 Description The issue affects PrinterOn Enterprise, where multiple authenticated stored XSS vulnerabilities have been identified. These vulnerabilities can be exploited via various fields, including the Machi...
CVE-2018-17167: Improper Neutralization of Input During Web Page Generation
PrinterOn Enterprise 4.1.4 suffers from multiple authenticated stored XSS vulnerabilities via the 1 "Machine Host Name" or "Server Serial Number" field in the clustering configuration, 2 "name" field in the Edit Group configuration, 3 "Rule Name" field in the Access Control configuration, 4...
CVE-2018-19936
PrinterOn Enterprise 4.1.4 allows Arbitrary File Deletion...
Arbitrary file deletion
PrinterOn Enterprise 4.1.4 allows Arbitrary File Deletion...
CVE-2018-19936
PrinterOn Enterprise 4.1.4 allows Arbitrary File Deletion...
CVE-2018-19936
PrinterOn Enterprise 4.1.4 allows Arbitrary File Deletion...
CVE-2018-19936
PrinterOn Enterprise 4.1.4 is affected by CVE-2018-19936, described as Arbitrary File Deletion. The vulnerability is evidenced by multiple sources (NVD entry; exploit-db; PacketStorm; PRION listing) and concrete details in the connected documents point to the affected software being PrinterOn Ent...