CVE-2008-1135

The CVE concerns OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) 7. The vulnerability arises because the login failure responses differ depending on whether a username is valid, enabling remote attackers to enumerate valid usernames. The documents do not provide explicit details on vulnerab...

CVE-2008-1134

CVE-2008-1134 affects OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) 7. The issue is an authentication flaw where a cookie that lacks a shared secret can be modified to log in as an arbitrary user. The connected sources confirm the vulnerable component is the INSEL 7 authentication mechani...

Privileg escalation in Omegasoft Insel 7

Hi list, Omegasoft's Insel 7 stores Cookies on your computer for identifying the logged-in user. As these Cookies do not contain any password hash but only the username and some meaningless stuff you can easily get into the system with another login. this gets even more easy, as there is a...