CVE-2009-2684

Multiple cross-site scripting (XSS) vulnerabilities in Jetdirect and the Embedded Web Server (EWS) on certain HP LaserJet and Color LaserJet printers, and HP Digital Senders, allow remote attackers to inject arbitrary web script or HTML via the (1) Product_URL or (2) Tech_URL parameter in an Apply action to the support_param.html/config script.

• CWE-79

• http://dsecrg.com/pages/vul/show.php?id=148Exploit
• http://marc.info/?l=bugtraq&m=125493484205823&w=2
• http://secunia.com/advisories/36969Vendor Advisory
• http://www.securityfocus.com/archive/1/507038/100/0/threaded
• http://www.securityfocus.com/bid/36613
• http://www.vupen.com/english/advisories/2009/2850Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/53677
• http://dsecrg.com/pages/vul/show.php?id=148Exploit
• http://marc.info/?l=bugtraq&m=125493484205823&w=2
• http://secunia.com/advisories/36969Vendor Advisory
• http://www.securityfocus.com/archive/1/507038/100/0/threaded
• http://www.securityfocus.com/bid/36613
• http://www.vupen.com/english/advisories/2009/2850Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/53677

Published

Oct 13, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-2678Unspecified vulnerability in Open System Services (OSS) Name…
• CVE-2009-2679Unspecified vulnerability in bootpd in HP HP-UX B.11.11, B.1…
• CVE-2009-2680Unspecified vulnerability in the Remote Management Interface…
• CVE-2009-2681Unspecified vulnerability in HP ProCurve Identity Driven Man…
• CVE-2009-2682Unspecified vulnerability in Role-Based Access Control (RBAC…
• CVE-2009-2683Unspecified vulnerability in the Sender module in HP Remote …
• CVE-2009-2685Stack-based buffer overflow in the login form in the managem…
• CVE-2009-2686Unspecified vulnerability in HP NonStop G06.12.00 through G0…
• CVE-2009-2687The exif_read_data function in the Exif module in PHP before…
• CVE-2009-2688Multiple integer overflows in glyphs-eimage.c in XEmacs 21.4…
• CVE-2009-2689JDK13Services.getProviders in Sun Java SE 5.0 before Update …
• CVE-2009-2690The encoder in Sun Java SE 6 before Update 15, and OpenJDK, …