CVE-2007-2992

CVE-2007-2992 describes multiple SQL injection vulnerabilities in OmegaMw7.asp for Omega (aka Omegasoft) INterneSErvicesLosungen (INSEL). The affected component is the OmegaMw7.asp page; the root cause is improper handling of user-controllable input in fields including the (1) user-created text f...

CVE-2007-2992: Undefined Security Weakness

Multiple SQL injection vulnerabilities in OmegaMw7.asp in OMEGA aka Omegasoft INterneSErvicesLosungen INSEL allow remote attackers to execute arbitrary SQL commands via 1 user-created text fields; the 2 F05003, 3 F05005, and 4 F05015 fields; and other unspecified standard fields...

CVE-2007-2993: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in OmegaMw7.asp in OMEGA aka Omegasoft INterneSErvicesLosungen INSEL allow remote attackers to inject arbitrary web script or HTML via 1 user-created text fields; the 2 F05003, 3 F05005, and 4 F05015 fields; and other unspecified standard fields...

[Full-disclosure] static XSS / SQL-Injection in Omegasoft Insel

Input passed to fields in OmegaMw7's tables isn't properly sanitized before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site and/or inject SQL-Commands This applies to many many standard fields i...

static XSS / SQL-Injection in Omegasoft Insel

Input passed to fields in OmegaMw7's tables isn't properly sanitized before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site and/or inject SQL-Commands This applies to many many standard fields i...

CVE-2006-2640

The CVE-2006-2640 entry describes a Cross-site Scripting (XSS) vulnerability in OmegaMw7a.ASP within OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL). The flaw allows remote attackers to inject arbitrary web script or HTML via the WCE parameter. According to NVD data, the vulnerability affec...

CVE-2006-2640

Cross-site scripting XSS vulnerability in OmegaMw7a.ASP in OMEGA aka Omegasoft INterneSErvicesLosungen INSEL allows remote attackers to inject arbitrary web script or HTML via the WCE parameter...

CVE-2006-2640: Undefined Security Weakness

Cross-site scripting XSS vulnerability in OmegaMw7a.ASP in OMEGA aka Omegasoft INterneSErvicesLosungen INSEL allows remote attackers to inject arbitrary web script or HTML via the WCE parameter...

XSS in Omegasoft's Insel

Hi together, This also works on serveral web-pages of this product. http://host/OmegaMw7a.ASP?WCI=Logon&WCE=0;scriptalertunescapedocument.cookie;/script There might be some ways for SQL-Injection, too, but i am not willing to try this at the real system : Vendor notified as CC regards MC.Iglo...