CVE:CVE-2009-1333
CNNVD:CNNVD-200904-374
HP Deskjet 6840是一款彩色喷墨打印机。
HP Deskjet 6840打印机的WEB接口存在跨站脚本漏洞。如果远程攻击者通过POST请求向/refresh_rate.htm页面提交了类似于<script>alert("found XSS on this page")</script>的字符串的话，所生成的出错页面就会执行请求中嵌入的脚本。
solution:Upgrade hp deskjet_6840 to a higher version than xf1m131a,and avoid the version xf1m131a