Web Stack (Printerlogic) - vulnerabilities (CVEs)
9 CVEs, 0 in the last 30 days, 5 known versions, newest CVE from 2022-02-02. Vendor: Printerlogic.
CVEs of Web Stack
- CVE-2021-42639 - CVSS 6.1 (medium), 2022-02-02: PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to multiple reflected cross site scripting vulnerabilities. Attacker controlled input…
- CVE-2021-42642 - CVSS 7.5 (high), 2022-02-02: PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability that allows an…
- CVE-2021-42637 - CVSS 9.8 (critical), 2022-02-02: PrinterLogic Web Stack versions 19.1.1.13 SP9 and below use user-controlled input to craft a URL, resulting in a Server Side Request Forgery (SSRF)…
- CVE-2021-42641 - CVSS 7.5 (high), 2022-02-02: PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability that allows an…
- CVE-2021-42633 - CVSS 5.3 (medium), 2022-02-02: PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to SQL Injection, which may allow an attacker to access additional audit records.
- CVE-2021-42640 - CVSS 9.1 (critical), 2022-02-02: PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability that allows an…
- CVE-2021-42638 - CVSS 8.1 (high), 2022-02-01: PrinterLogic Web Stack versions 19.1.1.13 SP9 and below do not sanitize user input resulting in pre-auth remote code execution.
- CVE-2021-42635 - CVSS 8.1 (high), 2022-01-31: PrinterLogic Web Stack versions 19.1.1.13 SP9 and below use a hardcoded APP_KEY value, leading to pre-auth remote code execution.
- CVE-2021-42631 - CVSS 8.1 (high), 2022-01-31: PrinterLogic Web Stack versions 19.1.1.13 SP9 and below deserializes attacker controlled leading to pre-auth remote code execution.
