CVE-2018-19391
15.03.2019, 16:29
Cobham Satcom Sailor 250 and 500 devices before 1.25 contained persistent XSS, which could be exploited by an unauthenticated threat actor via the /index.lua?pageID=Phone%20book name field.
| Vendor | Product | Version |
|---|---|---|
| cobham | satcom_sailor_250_firmware | 𝑥 < 1.25 |
| cobham | satcom_sailor_500_firmware | 𝑥 < 1.25 |
𝑥
= Vulnerable software versions