Talentsoft

talentsoft

6 CVEs • 3 products

Products (3)

Click to collapse

Toggle

CVEs (6)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2006-1897 1Talentsoft 1Web+ Shop Apr 16, 2026 Apr 20, 2006 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Webplus (aka talentsoft) Web+Shop 5.3.6, when Redirect URL for "Script Not Found" Error is not configured, allows remote attackers to obtain sensitive information via a quote (') or possibly other invalid value in the st...Show more Webplus (aka talentsoft) Web+Shop 5.3.6, when Redirect URL for "Script Not Found" Error is not configured, allows remote attackers to obtain sensitive information via a quote (') or possibly other invalid value in the storeid parameter in store.wml in webplus.exe, which reveals the path in a "Script Not Found" error message.Show less
CVE-2006-1682 1Talentsoft 1Web+ Shop Apr 16, 2026 Apr 11, 2006 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in webplus.exe in TalentSoft Web+Shop 5.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the deptname parameter, possibly involving the webpshop/ d...Show more Cross-site scripting (XSS) vulnerability in webplus.exe in TalentSoft Web+Shop 5.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the deptname parameter, possibly involving the webpshop/ department.wml script.Show less
CVE-2002-0753 1Talentsoft 1Web+ Server Apr 16, 2026 Aug 12, 2002 N/A· v4 N/A· v3 10.0 HIGH· v2 Buffer overflow in Talentsoft Web+ 5.0 allows remote attackers to execute arbitrary code via an HTTP request with a long cookie.
CVE-2002-0450 1Talentsoft 1Web+ Server Apr 16, 2026 Jul 26, 2002 N/A· v4 N/A· v3 10.0 HIGH· v2 Buffer overflow in Talentsoft Web+ 5.0 and earlier allows remote attackers to execute arbitrary code via a long Web Markup Language (wml) file name to (1) webplus.dll or (2) webplus.exe.
CVE-2002-0449 1Talentsoft 1Web+ Server Apr 16, 2026 Jul 26, 2002 N/A· v4 N/A· v3 10.0 HIGH· v2 Buffer overflow in webpsvc.exe for Talentsoft Web+ 5.0 and earlier allows remote attackers to execute arbitrary code via a long argument to webplus.exe program, which triggers the overflow in webpsvc.exe.
CVE-2000-0282 1Talentsoft 1Web+ Apr 16, 2026 Apr 12, 2000 N/A· v4 N/A· v3 5.0 MEDIUM· v2 TalentSoft webpsvr daemon in the Web+ shopping cart application allows remote attackers to read arbitrary files via a .. (dot dot) attack on the webplus CGI program.