CVE-2011-1533
Cross-site scripting (XSS) vulnerability on the HP Photosmart D110 and B110; Photosmart Plus B210; Photosmart Premium C310, Fax All-in-One, and C510; and ENVY 100 D410 printers allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
- Score
- CVSS 2.0 4.3 Medium
- Status
- Modified - hp-security-alert@hp.com
- Published
- 2011-04-15
- Last modified
- 2024-08-06
- Weaknesses
- CWE-79
Affected products
- Envy 100 D410 (Hp)
- Photosmart B110 (Hp)
- Photosmart D110 (Hp)
- Photosmart Plus B210 (Hp)
- Photosmart Premium C310 (Hp)
- Photosmart Premium C510 (Hp)
- Photosmart Premium Fax All-in-one (Hp)
References
- http://marc.info/?l=bugtraq&m=130262523515904&w=2
- http://secunia.com/advisories/44143
- http://securityreason.com/securityalert/8203
- http://www.securityfocus.com/bid/47319
- http://www.securitytracker.com/id?1025315
- http://www.vupen.com/english/advisories/2011/0931
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66683
