CVE-2007-5724

Multiple cross-site scripting XSS vulnerabilities in Omnistar Live allow remote attackers to inject arbitrary web script or HTML via 1 the categoryid parameter to users/kb.php, and possibly 3 the Email Box field in profile.php...

CVE-2007-5724: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Omnistar Live allow remote attackers to inject arbitrary web script or HTML via 1 the categoryid parameter to users/kb.php, and possibly 3 the Email Box field in profile.php...

CVE-2005-3880: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Omnistar KBase 4.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 articleid parameter in users/comments.php, 2 categoryid and 3 id parameters in users/kb.php...