CVE-2006-1682

Cross-site scripting XSS vulnerability in webplus.exe in TalentSoft Web+Shop 5.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the deptname parameter, possibly involving the webpshop/ department.wml script...

CVE-2006-1682

CVE-2006-1682 describes a cross-site scripting (XSS) vulnerability in webplus.exe within TalentSoft Web+Shop 5.0 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via the deptname parameter, potentially involving the webpshop/ department.wml script. The descrip...

Web+ Shop 5.0 XSS vuln.

Web+ Shop 5.0 XSS vuln. Vuln. discovered by : r0t Date: 8 april 2006 vendor:www.talentsoft.com/products/webplusshop/index.en.wml affected versions:Web+ Shop 5.0 and previous orginal advisory:http://pridels.blogspot.com/2006/04/web-shop-50-xss.html Vuln. description: Web+ Shop contains a flaw that...

TalentSoft Web+ Shop 5.0 - Deptname Cross-Site Scripting

TalentSoft Web+ Shop 5.0 - Deptname Cross-Site Scripting source: https://www.securityfocus.com/bid/17418/info Web+ Shop is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue...