2 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in webplus.exe in TalentSoft Web+Shop 5.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the deptname parameter, possibly involving the webpshop/ department.wml script...
4.3CVSS6.3AI score0.01736EPSS
SaveExploits2References5Affected Software1
CVE-2006-1682: Undefined Security Weakness
Cross-site scripting XSS vulnerability in webplus.exe in TalentSoft Web+Shop 5.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the deptname parameter, possibly involving the webpshop/ department.wml script...
4.3CVSS6AI score0.01736EPSS
SaveExploits2References1
20