Back to Database
Status published
High
CVE-2007-2992
Multiple SQL injection vulnerabilities in OmegaMw7.asp in OMEGA (aka Omegasoft)...
Vulnerability Description
Multiple SQL injection vulnerabilities in OmegaMw7.asp in OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) allow remote attackers to execute arbitrary SQL commands via (1) user-created text fields; the (2) F05003, (3) F05005, and (4) F05015 fields; and other unspecified standard fields.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-2992
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.securityfocus.com/bid/24275
- http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0003.html
- http://osvdb.org/37020
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34678
- http://securityreason.com/securityalert/2759
- http://secunia.com/advisories/25545
- http://www.securityfocus.com/archive/1/470240/100/0/threaded
More from omegasoft
View All →CVE-2008-1135
OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) 7 generates different responses depending...
Medium
5
CVE-2008-1134
OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) 7 supports authentication with a...
Medium
6.4
CVE-2007-2993
Multiple cross-site scripting (XSS) vulnerabilities in OmegaMw7.asp in OMEGA (aka...
Medium
4.3
CVE-2006-2640
Cross-site scripting (XSS) vulnerability in OmegaMw7a.ASP in OMEGA (aka Omegasoft)...
Medium
5.8
Affected Vendor
omegasoft
View all reports →Affected Software
interneserviceslosungen
Vulnerable Versions:
Unknown
Timeline
Official Publish:
June 4th, 2007
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.