CVE-2013-6033

Multiple cross-site scripting (XSS) vulnerabilities on Lexmark W840 through LS.HA.P252, T64x before LS.ST.P344, C935dn through LC.JO.P091, C920 through LS.TA.P152, C53x through LS.SW.P069, C52x through LS.FA.P150, E450 through LM.SZ.P124, E350 through LE.PH.P129, and E250 through LE.PM.P126 printers allow remote authenticated users to inject arbitrary web script or HTML by using (1) SNMP or (2) the Embedded Web Server (EWS) to set the (a) Contact or (b) Location field.

• CWE-79

• http://support.lexmark.com/index?page=content&id=TE585Vendor Advisory
• http://www.kb.cert.org/vuls/id/108062US Government Resource
• http://www.osvdb.org/102752
• http://www.securityfocus.com/bid/65277
• http://support.lexmark.com/index?page=content&id=TE585Vendor Advisory
• http://www.kb.cert.org/vuls/id/108062US Government Resource
• http://www.osvdb.org/102752
• http://www.securityfocus.com/bid/65277

Published

Feb 4, 2014

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-6027Stack-based buffer overflow in the RuntimeDiagnosticPing fun…
• CVE-2013-6028Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2013-6029Stack-based buffer overflow in the AT&T Connect Participant …
• CVE-2013-6030Directory traversal vulnerability on the Emerson Network Pow…
• CVE-2013-6031The Huawei E355 adapter with firmware 21.157.37.01.910 does …
• CVE-2013-6032cgi-bin/postpf/cgi-bin/dynamic/config/config.html on Lexmark…
• CVE-2013-6034The firmware on GateHouse; Harris BGAN RF-7800B-VU204 and BG…
• CVE-2013-6035The firmware on GateHouse; Harris BGAN RF-7800B-VU204 and BG…
• CVE-2013-6037Cross-site scripting (XSS) vulnerability in index.php in Ake…
• CVE-2013-6038Stack-based buffer overflow in Trimble SketchUp Viewer 13.0.…
• CVE-2013-6039Multiple cross-site scripting (XSS) vulnerabilities in Nagio…
• CVE-2013-6040MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls before …8.1