Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 01/06/2018 Updated: 16/11/2018

CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8

CVSS v3 Base Score: 4.8 | Impact Score: 2.7 | Exploitability Score: 1.7

VMScore: 355

Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability on Brother HL series printers allows remote malicious users to inject arbitrary web script or HTML via the url parameter to etc/loginerror.html.

Vulnerable Product	Search on Vulmon	Subscribe to Product
brother hl-l2340d_firmware
brother hl-l2380dw_firmware

# Exploit Title: [ XSS at Brother HL series printers] # Date: [30052018] # Exploit Author: [Huy Kha] # Vendor Homepage: [supportbrothercom] # Software Link: [ Website ] # Version: Brother HL series printers # Tested on: Mozilla FireFox # Reflected XSS Payload : "--!><Svg/OnLoad=(confirm)(1)>" # Description : Sta ...

CWE-79 https://www.exploit-db.com/exploits/44839/https://support.brother.com/g/b/faqend.aspx?c=us_ot&lang=en&prod=group2&ftype3=100033&faqid=faq00100530_000 https://nvd.nist.gov https://www.exploit-db.com/exploits/44839/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2018-11581

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect