Omnistar Interactive

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Omnistar Interactive records in CISA KEV

No Omnistar Interactive vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Omnistar Article Manager 2 records LOW Omnistar Live 2 records LOW Omnistar Kbase 1 record LOW

Records

2 records in Omnistar Live · all components

TI-2005-03634 CVE-2005-3840 · GHSA-7886-j39v-ch7f

SQL injection vulnerability in kb.php in Omnistar Live 5.2 and earlier allows remote…

LOW 35

SQL injection vulnerability in kb.php in Omnistar Live 5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) id and (2) category_id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01211 Published 2005-11-26 No fix listed CWE-89

TI-2007-05497 CVE-2007-5724 · GHSA-mhw8-85rp-mw3x

Multiple cross-site scripting (XSS) vulnerabilities in Omnistar Live allow remote…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in Omnistar Live allow remote attackers to inject arbitrary web script or HTML via (1) the category_id parameter to users/kb.php, and possibly (3) the Email Box field i…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01734 Published 2007-10-30 No fix listed CWE-79

Open these records in search →

Critical	0
High	4
Medium	1
Low	0
No CVSS	0