Vulnerability CVE-2018-12111


Published: 2018-06-11

Description:
Cross-site scripting (XSS) vulnerability in the Canon PrintMe EFI webinterface allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the /wt3/mydocs.php URI.

See advisories in our WLB2 database:
Topic
Author
Date
Low
Canon PrintMe EFI Cross Site Scripting
Huy Kha
13.06.2018

Type:

CWE-79

(Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))

 References:
https://gist.github.com/huykha/b16109b8e859a992b658dd18b2ee4a7c

Copyright 2018, cxsecurity.com

 

Back to Top