CVE-2007-5190

MEDIUM 4.3CVE-2007-5190 · Published 22/10/2007 · updated 16/06/2026

In short

CVE-2007-5190 is a MEDIUM (CVSS 4.3) vulnerability affecting omnivista (alcatel-lucent).
Chance of exploitation in the next 30 days (EPSS): 2.0%, higher than 80.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
omnivista alcatel-lucent	`≤ 4760_r4.2`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in Alcatel OmniVista 4760 R4.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the action parameter to php-bin/Webclient.php or (2) the Langue parameter to the default URI.

References

osvdb.org/37997
secunia.com/advisories/27294 · Patch
securityreason.com/securityalert/3280
s21sec.com/avisos/s21sec-038-en.txt
securityfocus.com/archive/1/482507/100/0/threaded
securityfocus.com/bid/26128 · Exploit
vupen.com/english/advisories/2007/3541
www1.alcatel-lucent.com/psirt/statements/2007003/4760xss.htm · Patch

More vulnerabilities in omnivista

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free