CVE-2018-19391 | BDVDB-2026-113753 Detail

Description#

Cobham Satcom Sailor 250 and 500 devices before 1.25 contained persistent XSS, which could be exploited by an unauthenticated threat actor via the /index.lua?pageID=Phone%20book name field.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://cyberskr.com/blog/cobham-satcom-250-500.html
https://gist.github.com/CyberSKR/f6fc93702b9b9b73afa07877d1479fe0

Exploit#

No public exploit known

History#

Version 12019-03-15Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.