Web Stack

web_stack

Vendor: Printerlogic • 9 CVEs

CVEs (9)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-42642 1Printerlogic 1Web Stack Jul 9, 2026 Feb 2, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability that allows an unauthenticated attacker to disclose the plaintext console username and pa...Show more PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability that allows an unauthenticated attacker to disclose the plaintext console username and password for a printer.Show less
CVE-2021-42641 1Printerlogic 1Web Stack Jul 9, 2026 Feb 2, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability that allows an unauthenticated attacker to disclose the username and email address of all...Show more PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability that allows an unauthenticated attacker to disclose the username and email address of all users.Show less
CVE-2021-42640 1Printerlogic 1Web Stack Jul 9, 2026 Feb 2, 2022 N/A· v4 9.1 CRITICAL· v3 6.4 MEDIUM· v2 PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability that allows an unauthenticated attacker to reassign drivers for any printer.
CVE-2021-42639 1Printerlogic 1Web Stack Jul 9, 2026 Feb 2, 2022 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to multiple reflected cross site scripting vulnerabilities. Attacker controlled input is reflected back in the page without sanitization.
CVE-2021-42637 1Printerlogic 1Web Stack Jul 9, 2026 Feb 2, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 PrinterLogic Web Stack versions 19.1.1.13 SP9 and below use user-controlled input to craft a URL, resulting in a Server Side Request Forgery (SSRF) vulnerability.
CVE-2021-42633 1Printerlogic 1Web Stack Jul 9, 2026 Feb 2, 2022 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to SQL Injection, which may allow an attacker to access additional audit records.
CVE-2021-42638 1Printerlogic 1Web Stack Jul 9, 2026 Feb 1, 2022 N/A· v4 8.1 HIGH· v3 9.3 HIGH· v2 PrinterLogic Web Stack versions 19.1.1.13 SP9 and below do not sanitize user input resulting in pre-auth remote code execution.
CVE-2021-42635 1Printerlogic 1Web Stack Jul 9, 2026 Jan 31, 2022 N/A· v4 8.1 HIGH· v3 9.3 HIGH· v2 PrinterLogic Web Stack versions 19.1.1.13 SP9 and below use a hardcoded APP_KEY value, leading to pre-auth remote code execution.
CVE-2021-42631 1Printerlogic 2Virtual Appliance Web Stack Jul 9, 2026 Jan 31, 2022 N/A· v4 8.1 HIGH· v3 9.3 HIGH· v2 PrinterLogic Web Stack versions 19.1.1.13 SP9 and below deserializes attacker controlled leading to pre-auth remote code execution.