Vulnerabilities

TI-2008-01088 CVE-2008-1135 · GHSA-48pr-mfqp-6r9r

OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) 7 generates different responses…

LOW 26

OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) 7 generates different responses depending on whether or not a username is valid in a failed login attempt, which allows remote attackers to enumerate valid usernames.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01324 Published 2008-03-04 No fix listed CWE-200

TI-2008-01087 CVE-2008-1134 · GHSA-xwjm-qj7j-73qw

OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) 7 supports authentication with a…

LOW 33

OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) 7 supports authentication with a cookie that lacks a shared secret, which allows remote attackers to login as an arbitrary user via a modified cookie.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.02188 Published 2008-03-04 No fix listed CWE-287

TI-2007-02899 CVE-2007-2993 · GHSA-37vj-pmvf-vxpc

Multiple cross-site scripting (XSS) vulnerabilities in OmegaMw7.asp in OMEGA (aka…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in OmegaMw7.asp in OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) allow remote attackers to inject arbitrary web script or HTML via (1) user-created text fields;…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01263 Published 2007-06-04 No fix listed

TI-2007-02898 CVE-2007-2992 · GHSA-c6mp-c9vc-3gwg

Multiple SQL injection vulnerabilities in OmegaMw7.asp in OMEGA (aka Omegasoft)…

LOW 35

Multiple SQL injection vulnerabilities in OmegaMw7.asp in OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) allow remote attackers to execute arbitrary SQL commands via (1) user-created text fields; the (2) F05003, (…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01293 Published 2007-06-04 No fix listed

TI-2006-02549 CVE-2006-2640 · GHSA-jwjf-qcqc-qr75

Cross-site scripting (XSS) vulnerability in OmegaMw7a.ASP in OMEGA (aka Omegasoft)…

LOW 28

Cross-site scripting (XSS) vulnerability in OmegaMw7a.ASP in OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) allows remote attackers to inject arbitrary web script or HTML via the WCE parameter.

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.0118 Published 2006-05-30 No fix listed