Design/Logic Flaw

Webplus aka talentsoft Web+Shop 5.3.6, when Redirect URL for "Script Not Found" Error is not configured, allows remote attackers to obtain sensitive information via a quote ' or possibly other invalid value in the storeid parameter in store.wml in webplus.exe, which reveals the path in a "Script...

CVE-2006-1897

CVE-2006-1897 affects Webplus (aka talentsoft) Web+Shop 5.3.6. The vulnerability arises when the Redirect URL for the “Script Not Found” error is not configured, allowing remote attackers to cause information disclosure via the storeid parameter in store.wml within webplus.exe, revealing the path...

TalentSoft Web+Shop Path Disclosure

TalentSoft Web+Shop Path Disclosure Software: Web+Shop Version: 5.3.6 Website: http://www.webplus.com Bug: path disclosure Exploitation: Remote Description: Web+Shop is a user-friendly e-commerce shopping cart application for the web. Vulnerability: Web+Shop installation path can be disclosed by...