Unscored severity · published Oct 22, 2007
CVE-2007-5190
Multiple cross-site scripting (XSS) vulnerabilities in Alcatel OmniVista 4760 R4.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the action…
–
CVSS
2%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in Alcatel OmniVista 4760 R4.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the action parameter to php-bin/Webclient.php or (2) the Langue parameter to the default URI.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OM
Omnivista · Alcatel-lucent
through 4760_r4.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5190
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5190
osvdb.org
http://osvdb.org/37997
Patch
http://secunia.com/advisories/27294
securityreason.com
http://securityreason.com/securityalert/3280
www.s21sec.com
http://www.s21sec.com/avisos/s21sec-038-en.txt
www.securityfocus.com
http://www.securityfocus.com/archive/1/482507/100/0/threaded
Exploit
http://www.securityfocus.com/bid/26128
More from Omnivista
–
CVE-2011-0345
Directory traversal vulnerability in the NMS server in Alcatel-Lucent OmniVista 4760 R5.1.06.03 and earlier allows remote attackers to read arbitrary files via directory traversal…