omegasoft CVE Vulnerabilities & CVE List (5)

Products (CPE): — CVEs: 5

omegasoft vulnerability overview

Aggregates CVE and security vulnerability intelligence across all omegasoft-related products, including CVSS, EPSS, publication dates, and vulnerability intelligence data.

Historical issues mainly involve vendor risk path handling, vendor risk cross-site scripting, and vendor risk sql injection and related problems; some flaws may lead to vendor impact file overwrite.

Vulnerability distribution trend (last 24 months)

Showing 15 of 5 CVEs
«« First « Prev Page 1 / 1 Next »
CVE Summary Source Max CVSS EPSS % Published Updated
CVE-2008-1135 OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) 7 generates different responses depending on whether or not a username is valid in a failed login attempt, which allows remote attackers to enumerate valid usernames. [email protected] 5.0 0.32% 2008-03-04 2026-04-23
CVE-2008-1134 OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) 7 supports authentication with a cookie that lacks a shared secret, which allows remote attackers to login as an arbitrary user via a modified cookie. [email protected] 6.4 2.69% 2008-03-04 2026-04-23
CVE-2007-2993 Multiple cross-site scripting (XSS) vulnerabilities in OmegaMw7.asp in OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) allow remote attackers to inject arbitrary web script or HTML via (1) user-created text fields; the (2) F05003, (3) F05005, and (4) F05015 fields; and other unspecified standard fields. [email protected] 4.3 0.47% 2007-06-04 2026-04-23
CVE-2007-2992 Multiple SQL injection vulnerabilities in OmegaMw7.asp in OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) allow remote attackers to execute arbitrary SQL commands via (1) user-created text fields; the (2) F05003, (3) F05005, and (4) F05015 fields; and other unspecified standard fields. [email protected] 7.5 0.75% 2007-06-04 2026-04-23
CVE-2006-2640 Cross-site scripting (XSS) vulnerability in OmegaMw7a.ASP in OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) allows remote attackers to inject arbitrary web script or HTML via the WCE parameter. [email protected] 5.8 0.41% 2006-05-30 2026-04-16
«« First « Prev Page 1 / 1 Next »
cvelogic Threat Intelligence