VendorsOmegasoftinterneserviceslosungenall versions
Vulnerabilities

Omegasoft Interneserviceslosungen

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

5CVEs
CVE-2007-2992
Multiple SQL injection vulnerabilities in OmegaMw7.asp in OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) allow remote attackers to execute arbitrary SQL commands via (1) user-created text fields; the (2) F05003, (3) F05005, and (4) F05015 fields; and other unspecified standard fields.
Published 2007-06-04 · Modified
7.5EPSS 0.013
CVE-2008-1134
OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) 7 supports authentication with a cookie that lacks a shared secret, which allows remote attackers to login as an arbitrary user via a modified cookie.
Published 2008-03-04 · Modified
6.41 PoCEPSS 0.022
CVE-2006-2640
Cross-site scripting (XSS) vulnerability in OmegaMw7a.ASP in OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) allows remote attackers to inject arbitrary web script or HTML via the WCE parameter.
Published 2006-05-30 · Modified
5.8EPSS 0.012
CVE-2008-1135
OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) 7 generates different responses depending on whether or not a username is valid in a failed login attempt, which allows remote attackers to enumerate valid usernames.
Published 2008-03-04 · Modified
5.0EPSS 0.013
CVE-2007-2993
Multiple cross-site scripting (XSS) vulnerabilities in OmegaMw7.asp in OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) allow remote attackers to inject arbitrary web script or HTML via (1) user-created text fields; the (2) F05003, (3) F05005, and (4) F05015 fields; and other unspecified standard fields.
Published 2007-06-04 · Modified
4.3EPSS 0.013