GET /web/guest/en/websys/webArch/mainFrame.cgi'/>alert(okie)hello Web Image Monitor alert(document. Request made to the http site of the printer and the application makes a redirect to https site, which is injecting the URI value in the response in oder to redirect to the site url. The web portal of RICOH MP C4503 Web Image Monitor application is vulnerable to the HTML injection, reflected cross site scripting and sensitive data disclosure. Vulnerability: Cross site scripting (Reflected) & HTML injection Ricoh is one of the leading providers of office equipment, such as MFPs, Printers, Fascimiles, and related supplies and services. The following operations can be remotely performed. Alert Alert Messages (0item(s)) Status System. Using Web Image Monitor, you can check the machine status and change settings.

# Reference : MP C4503 Web Image Monitor XSS and HTML injection Refresh Device Name: SAVIN MP 6002 Location: Comment: Host Name: RNP0026735D88CF. # Affected Product: RICOH MP C4503 Web Image Monitor RNP002673546C98 - Web Image Manitor - Internet Expiorer e /web/guest/en/websys/webArch/mainFrame.cgi 192.168.2.235 RNP002673546C98 - web 1. # Google Dork: inurl:/web/guest/en/websys/webArch/mainFrame.cgi Over time, the term dork became shorthand for a search query that located sensitive information and dorks were included with may web application vulnerability releases to show examples of vulnerable web sites.

# Exploit Title: RICOH MP C4503 Web Image Monitor XSS and HTML injection

Web guest websys webarch mainframe