CVE-2007-5190

Multiple cross-site scripting (XSS) vulnerabilities in Alcatel OmniVista 4760 R4.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the action parameter to php-bin/Webclient.php or (2) the Langue parameter to the default URI.

• CWE-79

• http://osvdb.org/37997
• http://secunia.com/advisories/27294Patch, Vendor Advisory
• http://securityreason.com/securityalert/3280
• http://www.s21sec.com/avisos/s21sec-038-en.txt
• http://www.securityfocus.com/archive/1/482507/100/0/threaded
• http://www.securityfocus.com/bid/26128Exploit, Patch
• http://www.vupen.com/english/advisories/2007/3541
• http://www1.alcatel-lucent.com/psirt/statements/2007003/4760xss.htmPatch
• http://osvdb.org/37997
• http://secunia.com/advisories/27294Patch, Vendor Advisory
• http://securityreason.com/securityalert/3280
• http://www.s21sec.com/avisos/s21sec-038-en.txt
• http://www.securityfocus.com/archive/1/482507/100/0/threaded
• http://www.securityfocus.com/bid/26128Exploit, Patch
• http://www.vupen.com/english/advisories/2007/3541
• http://www1.alcatel-lucent.com/psirt/statements/2007003/4760xss.htmPatch

Published

Oct 22, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-5184Format string vulnerability in the SMBDirList function in di…
• CVE-2007-5185Multiple PHP remote file inclusion vulnerabilities in phpWCM…
• CVE-2007-5186PHP remote file inclusion vulnerability in index.php in Segu…
• CVE-2007-5187SQL injection vulnerability in infusions/calendar_events_pan…
• CVE-2007-5188Unspecified vulnerability in the XOOPS uploader class in Xoo…
• CVE-2007-5189Multiple SQL injection vulnerabilities in mes_add.php in x-s…
• CVE-2007-5191mount and umount in util-linux and loop-aes-utils call the s…
• CVE-2007-5193The default configuration for twiki 4.1.2 on Debian GNU/Linu…
• CVE-2007-5194The Chroot server in rMake 1.0.11 creates a /dev/zero device…
• CVE-2007-5195Unspecified vulnerability in the SSL implementation in Group…
• CVE-2007-5196Unspecified vulnerability in the SSL implementation in Group…
• CVE-2007-5197Buffer overflow in the Mono.Math.BigInteger class in Mono 1.…