Vulnerabilities

TI-2006-01842 CVE-2006-1897 · GHSA-xc38-cj6h-xrxf

Webplus (aka talentsoft) Web+Shop 5.3.6, when Redirect URL for "Script Not Found" Error…

LOW 26

Webplus (aka talentsoft) Web+Shop 5.3.6, when Redirect URL for "Script Not Found" Error is not configured, allows remote attackers to obtain sensitive information via a quote (') or possibly other invalid value in the st…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01723 Published 2006-04-20 No fix listed

TI-2006-01628 CVE-2006-1682 · GHSA-4qm3-r9hq-rfg6

Cross-site scripting (XSS) vulnerability in webplus.exe in TalentSoft Web+Shop 5.0 and…

LOW 24

Cross-site scripting (XSS) vulnerability in webplus.exe in TalentSoft Web+Shop 5.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the deptname parameter, possibly involving the webpshop/ d…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01736 Published 2006-04-10 No fix listed

TI-2002-00730 CVE-2002-0753 · GHSA-fhcj-vx72-4g96

Buffer overflow in Talentsoft Web+ 5.0 allows remote attackers to execute arbitrary code…

MEDIUM 52

Buffer overflow in Talentsoft Web+ 5.0 allows remote attackers to execute arbitrary code via an HTTP request with a long cookie.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05855 Published 2002-07-26 No fix listed

TI-2002-00435 CVE-2002-0450 · GHSA-8428-qf2m-r92m

Buffer overflow in Talentsoft Web+ 5.0 and earlier allows remote attackers to execute…

MEDIUM 51

Buffer overflow in Talentsoft Web+ 5.0 and earlier allows remote attackers to execute arbitrary code via a long Web Markup Language (wml) file name to (1) webplus.dll or (2) webplus.exe.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05332 Published 2002-06-11 No fix listed

TI-2002-00434 CVE-2002-0449 · GHSA-x735-64rw-4f55

Buffer overflow in webpsvc.exe for Talentsoft Web+ 5.0 and earlier allows remote…

MEDIUM 54

Buffer overflow in webpsvc.exe for Talentsoft Web+ 5.0 and earlier allows remote attackers to execute arbitrary code via a long argument to webplus.exe program, which triggers the overflow in webpsvc.exe.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.08961 Published 2002-06-11 No fix listed

TI-2000-00282 CVE-2000-0282 · GHSA-3j9x-r422-3rxr

TalentSoft webpsvr daemon in the Web+ shopping cart application allows remote attackers…

LOW 33

TalentSoft webpsvr daemon in the Web+ shopping cart application allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0777 Published 2000-10-13 No fix listed