Interneserviceslosungen Security Vulnerabilities and Issues — Interneserviceslosungen CVE List

Lucene search

OmegasoftInterneserviceslosungen

5 matches found

CVE•added 2007/06/04 4:30 p.m.•42 views

CVE-2007-2992

Multiple SQL injection vulnerabilities in OmegaMw7.asp in OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) allow remote attackers to execute arbitrary SQL commands via (1) user-created text fields; the (2) F05003, (3) F05005, and (4) F05015 fields; and other unspecified standard fields.

7.5CVSS8.6AI score0.00706EPSS

CVE•added 2008/03/04 7:44 p.m.•37 views

CVE-2008-1134

OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) 7 supports authentication with a cookie that lacks a shared secret, which allows remote attackers to login as an arbitrary user via a modified cookie.

6.4CVSS7AI score0.02204EPSS

CVE•added 2007/06/04 4:30 p.m.•31 views

CVE-2007-2993

Multiple cross-site scripting (XSS) vulnerabilities in OmegaMw7.asp in OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) allow remote attackers to inject arbitrary web script or HTML via (1) user-created text fields; the (2) F05003, (3) F05005, and (4) F05015 fields; and other unspecified stand...

4.3CVSS5.9AI score0.00475EPSS

CVE•added 2006/05/30 10:2 a.m.•29 views

CVE-2006-2640

Cross-site scripting (XSS) vulnerability in OmegaMw7a.ASP in OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) allows remote attackers to inject arbitrary web script or HTML via the WCE parameter.

5.8CVSS5.7AI score0.00427EPSS

CVE•added 2008/03/04 7:44 p.m.•29 views

CVE-2008-1135

OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) 7 generates different responses depending on whether or not a username is valid in a failed login attempt, which allows remote attackers to enumerate valid usernames.

5CVSS6.7AI score0.00319EPSS