← Back

Omnistar Interactive

omnistar_interactive

5 CVEs • 3 products

Products (3)

Click to collapse
Toggle
Omnistar Live
omnistar_live
2 CVEs
Omnistar Article Manager
omnistar_article_manager
2 CVEs
Omnistar Kbase
omnistar_kbase
1 CVE

CVEs (5)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2007-5724
1Omnistar Interactive
1Omnistar Live
Apr 23, 2026
Oct 30, 2007
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Multiple cross-site scripting (XSS) vulnerabilities in Omnistar Live allow remote attackers to inject arbitrary web script or HTML via (1) the category_id parameter to users/kb.php, and possibly (3) the Email Box field i...Show more
Multiple cross-site scripting (XSS) vulnerabilities in Omnistar Live allow remote attackers to inject arbitrary web script or HTML via (1) the category_id parameter to users/kb.php, and possibly (3) the Email Box field in profile.php.Show less
CVE-2007-4952
1Omnistar Interactive
1Omnistar Article Manager
Apr 23, 2026
Sep 18, 2007
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in article.php in OmniStar Article Manager allows remote attackers to execute arbitrary SQL commands via the page_id parameter in a favorite op action, a different vector than CVE-2006-5917.
CVE-2006-5917
1Omnistar Interactive
1Omnistar Article Manager
Apr 23, 2026
Nov 15, 2006
N/A· v4
N/A· v3
7.5 HIGH· v2
Multiple SQL injection vulnerabilities in OmniStar Article Manager allow remote attackers to execute arbitrary SQL commands via the (1) article_id parameter in (a) articles/comments.php and (b) articles/article.php, and...Show more
Multiple SQL injection vulnerabilities in OmniStar Article Manager allow remote attackers to execute arbitrary SQL commands via the (1) article_id parameter in (a) articles/comments.php and (b) articles/article.php, and the (2) page_id parameter in (c) articles/pages.php.Show less
CVE-2005-3880
1Omnistar Interactive
1Omnistar Kbase
Apr 16, 2026
Nov 29, 2005
N/A· v4
N/A· v3
7.5 HIGH· v2
Multiple SQL injection vulnerabilities in Omnistar KBase 4.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) article_id parameter in users/comments.php, (2) category_id and (3) id paramet...Show more
Multiple SQL injection vulnerabilities in Omnistar KBase 4.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) article_id parameter in users/comments.php, (2) category_id and (3) id parameters in users/kb.php.Show less
CVE-2005-3840
1Omnistar Interactive
1Omnistar Live
Apr 16, 2026
Nov 26, 2005
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in kb.php in Omnistar Live 5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) id and (2) category_id parameter. NOTE: due to a typo, an Internet Explorer is...Show more
SQL injection vulnerability in kb.php in Omnistar Live 5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) id and (2) category_id parameter. NOTE: due to a typo, an Internet Explorer issue was incorrectly assigned this identifier, but the correct identifier is CVE-2005-3240.Show less