mailing list archives
Re: Amusing xss against some lexmark printers
From: Dan Kaminsky <dan () doxpara com>
Date: Wed, 5 Jan 2011 19:14:49 -0800
You can use nmap to set the RDYMSG of a printer and xss the printer
--script-args='pjl_ready_message="<script>alert(1);</script>"' . 
What's the rendering engine? WebKit?
Full-Disclosure - We believe in it.
Hosted and sponsored by Secunia - http://secunia.com/