Description
Multiple cross-site scripting (XSS) vulnerabilities in OmegaMw7.asp in OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) allow remote attackers to inject arbitrary web script or HTML via (1) user-created text fields; the (2) F05003, (3) F05005, and (4) F05015 fields; and other unspecified standard fields.
References
- 24275 vdb-entry
- 20070601 static XSS / SQL-Injection in Omegasoft Insel mailing-list
- 2759 third-party-advisory
- omegasoft-multiple-xss(34677) vdb-entry
- 37021 vdb-entry
- 25545 third-party-advisory
- 20070601 static XSS / SQL-Injection in Omegasoft Insel mailing-list