CVE-2005-3840

CVE-2005-3840 describes a SQL injection vulnerability in Omnistar Live (kb.php) affecting version 5.2 and earlier. The issue arises from unsafely processing user-supplied input for the id and category_id parameters, enabling remote attackers to execute arbitrary SQL commands. The description note...

CVE-2007-5724

CVE-2007-5724 describes multiple cross-site scripting (XSS) vulnerabilities in Omnistar Live. Attackers can inject arbitrary web script or HTML via category_id in users/kb.php , and possibly the Email Box field in profile.php . The connected documents do not provide details on affected versions, ...