Re: Amusing xss against some lexmark printers

[paul.szabo () sydney edu au]

> ... the PJL RDYMSG prank ... can be used to xss the web interface.
> ... google for  'Lexmark X651de "Device Status" ' ...

Amusing, but not very useful to have an XSS on such a website.
The web interface should be locked down, or anyone can lock up your
device or read your "fax job log".

Cheers, Paul

Paul Szabo   psz () maths usyd edu au   http://www.maths.usyd.edu.au/u/psz/
School of Mathematics and Statistics   University of Sydney    Australia

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/