CVE-2018-5071

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

Persistent XSS exists in the web server on Cobham Sea Tel 116 build 222429 satellite communication system devices: remote attackers can inject malicious JavaScript code using the device's TELNET shell built-in commands, as demonstrated by the "set ship name" command. This is similar to a Cross Protocol Injection with SNMP.

Metrics

CVSS 3.0 5.4/10CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published: Jan 8, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-50724.8Online Ticket Booking has XSS via the admin/sitesettings.php keyword parameter.CVE-2018-50736.8Online Ticket Booking has CSRF via admin/movieedit.php.CVE-2018-50744.8Online Ticket Booking has XSS via the admin/manageownerlist.php contact parameter.CVE-2018-50754.8Online Ticket Booking has XSS via the admin/snacks_edit.php snacks_name parameter.CVE-2018-50764.8Online Ticket Booking has XSS via the admin/newsedit.php newstitle parameter.CVE-2018-50774.8Online Ticket Booking has XSS via the admin/movieedit.php moviename parameter.CVE-2018-50784.8Online Ticket Booking has XSS via the admin/eventlist.php cast parameter.CVE-2018-50797.8In K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecifie CVE-2018-50807.8In K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecifie CVE-2018-50817.8In K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecifie CVE-2018-50827.8In K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecifie CVE-2018-50837.8In K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecifie