Vulnerability in Talentsoft Web\+

CVE-2000-0282

TalentSoft webpsvr daemon in the Web+ shopping cart application allows remote attackers to read arbitrary files via a .. (dot dot) attack on the webplus CGI program.

EPSS: 0.078 (94.0th percentile) — read the EPSS interpretation.

Affected products

Talentsoft Web\+ — versions 4
N/a — versions n/a

References

cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (Vendor Advisory, mailing-list, Exploit, x_refsource_BUGTRAQ, Patch)