Vulnerabilities

TI-2007-05497 CVE-2007-5724 · GHSA-mhw8-85rp-mw3x

Multiple cross-site scripting (XSS) vulnerabilities in Omnistar Live allow remote…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in Omnistar Live allow remote attackers to inject arbitrary web script or HTML via (1) the category_id parameter to users/kb.php, and possibly (3) the Email Box field i…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01734 Published 2007-10-30 No fix listed CWE-79

TI-2007-04774 CVE-2007-4952 · GHSA-m88w-w7m5-c5r5

SQL injection vulnerability in article.php in OmniStar Article Manager allows remote…

LOW 35

SQL injection vulnerability in article.php in OmniStar Article Manager allows remote attackers to execute arbitrary SQL commands via the page_id parameter in a favorite op action, a different vector than CVE-2006-5917.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00952 Published 2007-09-18 No fix listed CWE-89

TI-2006-05700 CVE-2006-5917 · GHSA-gxq3-8rhm-xx74

Multiple SQL injection vulnerabilities in OmniStar Article Manager allow remote attackers…

LOW 36

Multiple SQL injection vulnerabilities in OmniStar Article Manager allow remote attackers to execute arbitrary SQL commands via the (1) article_id parameter in (a) articles/comments.php and (b) articles/article.php, and…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01484 Published 2006-11-15 No fix listed

TI-2005-03674 CVE-2005-3880 · GHSA-9w98-qfmg-3h82

Multiple SQL injection vulnerabilities in Omnistar KBase 4.0 and earlier allow remote…

LOW 36

Multiple SQL injection vulnerabilities in Omnistar KBase 4.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) article_id parameter in users/comments.php, (2) category_id and (3) id paramet…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01333 Published 2005-11-29 No fix listed

TI-2005-03634 CVE-2005-3840 · GHSA-7886-j39v-ch7f

SQL injection vulnerability in kb.php in Omnistar Live 5.2 and earlier allows remote…