Unrated severityNVD Advisory· Published Oct 22, 2007· Updated Jun 16, 2026

CVE-2007-5190

Description

Multiple cross-site scripting (XSS) vulnerabilities in Alcatel OmniVista 4760 R4.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the action parameter to php-bin/Webclient.php or (2) the Langue parameter to the default URI.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Alcatel Lucent/Omnivista
cpe:2.3:a:alcatel-lucent:omnivista:*:*:*:*:*:*:*:*
Range: <=4760_r4.2
Alcatel Lucent/Omnivista 4760 Serverllm-fuzzy
Range: <=R4.2

Patches

Vulnerability mechanics

References

secunia.com/advisories/27294nvdPatchVendor Advisory
www1.alcatel-lucent.com/psirt/statements/2007003/4760xss.htmnvdPatch
www.securityfocus.com/bid/26128nvdExploitPatch
osvdb.org/37997nvd
securityreason.com/securityalert/3280nvd
www.s21sec.com/avisos/s21sec-038-en.txtnvd
www.securityfocus.com/archive/1/482507/100/0/threadednvd
www.vupen.com/english/advisories/2007/3541nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000