Description
Multiple SQL injection vulnerabilities in OmegaMw7.asp in OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) allow remote attackers to execute arbitrary SQL commands via (1) user-created text fields; the (2) F05003, (3) F05005, and (4) F05015 fields; and other unspecified standard fields.
References
- 24275 vdb-entry
- 20070601 static XSS / SQL-Injection in Omegasoft Insel mailing-list
- 37020 vdb-entry
- omegasoft-multiple-sql-injection(34678) vdb-entry
- 2759 third-party-advisory
- 25545 third-party-advisory
- 20070601 static XSS / SQL-Injection in Omegasoft Insel mailing-list