Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Talentsoft Subscribe
Filtered by product Web\+ Shop
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2006-1897 1 Talentsoft 1 Web\+ Shop 2018-10-18 5.0 MEDIUM N/A
Webplus (aka talentsoft) Web+Shop 5.3.6, when Redirect URL for "Script Not Found" Error is not configured, allows remote attackers to obtain sensitive information via a quote (') or possibly other invalid value in the storeid parameter in store.wml in webplus.exe, which reveals the path in a "Script Not Found" error message.
CVE-2006-1682 1 Talentsoft 1 Web\+ Shop 2017-07-19 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in webplus.exe in TalentSoft Web+Shop 5.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the deptname parameter, possibly involving the webpshop/ department.wml script.