medium6.1Public exploit code
CVE-2018-17313
On the RICOH MP C307 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- RICOH MP C1803 JPN Printer - Cross-Site Scripting2018-10-03 · webapps · hardware
Impact
On the RICOH MP C307 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ricoh | Mp C307 Firmware | All versions |