PrinterLogic Web Stack vulnerabilities

An IDOR vulnerability in PrinterLogic Web Stack versions 19.1.1.13 SP9 and below allows an unauthenticated attacker to reassign drivers for any printer.

An SSRF vulnerability in PrinterLogic Web Stack versions 19.1.1.13 SP9 and below allows an attacker to use user-controlled input to craft a URL, enabling server-side requests to internal network resources.

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to pre-authentication remote code execution due to insufficient input sanitization.

The vulnerability in PrinterLogic Web Stack versions 19.1.1.13 SP9 and below is due to a hardcoded APP_KEY value. This allows pre-authentication remote code execution.

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below deserialize attacker-controlled data, leading to pre-authentication remote code execution.

An IDOR vulnerability in PrinterLogic Web Stack versions 19.1.1.13 SP9 and below allows an unauthenticated attacker to disclose the plaintext console username and password for a printer.

An IDOR vulnerability in PrinterLogic Web Stack versions 19.1.1.13 SP9 and below allows an unauthenticated attacker to disclose usernames and email addresses of all users.

Reflected XSS vulnerability in PrinterLogic Web Stack versions 19.1.1.13 SP9 and below. Attacker-controlled input is reflected back in the page without sanitization.

SQL Injection vulnerability in PrinterLogic Web Stack versions 19.1.1.13 SP9 and below allows an attacker to inject malicious SQL code, potentially gaining unauthorized access to additional audit records.