Approved changes feed: RSS · Atom

cpe:2.3:a:omnistar_interactive:omnistar_live:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOmnistar Interactive (0c6ff088-b06e-5231-a9bb-f47771f202c9)
ProductOmnistar Live (0dc9d8d6-554f-5788-93d4-e76c45dfe05c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-5724 vulnerable 2026-06-08 04:50:06.883332 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Omnistar Live allow remote attackers to inject arbitrary web script or HTML via (1) the category_id parameter to users/kb.php, and possibly (3) the Email Box field in profile.php.
Published: 2007-10-30T21:00:00.000Z
Updated: 2024-08-07T15:39:13.604Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3840 vulnerable 2026-06-08 04:48:42.285027 Details available
SQL injection vulnerability in kb.php in Omnistar Live 5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) id and (2) category_id parameter. NOTE: due to a typo, an Internet Explorer issue was incorrectly assigned this identifier, but the correct identifier is CVE-2005-3240.
Published: 2005-11-26T22:00:00.000Z
Updated: 2024-08-07T23:24:36.526Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.