VYPR

Web\+

by Talentsoft

CVEs (4)

  • CVE-2000-0282Apr 12, 2000
    risk 0.04cvss epss 0.08

    TalentSoft webpsvr daemon in the Web+ shopping cart application allows remote attackers to read arbitrary files via a .. (dot dot) attack on the webplus CGI program.

  • CVE-2002-0449Jul 26, 2002
    risk 0.01cvss epss 0.09

    Buffer overflow in webpsvc.exe for Talentsoft Web+ 5.0 and earlier allows remote attackers to execute arbitrary code via a long argument to webplus.exe program, which triggers the overflow in webpsvc.exe.

  • CVE-2002-0753Aug 12, 2002
    risk 0.00cvss epss 0.06

    Buffer overflow in Talentsoft Web+ 5.0 allows remote attackers to execute arbitrary code via an HTTP request with a long cookie.

  • CVE-2002-0450Jul 26, 2002
    risk 0.00cvss epss 0.05

    Buffer overflow in Talentsoft Web+ 5.0 and earlier allows remote attackers to execute arbitrary code via a long Web Markup Language (wml) file name to (1) webplus.dll or (2) webplus.exe.