EUVD-2006-1897

Malware in sbrugna...

EUVD-2020-12802

Malware in sbrugna...

CVE-2020-20012

WebPlus Pro v1.4.7.8.4-01 is vulnerable to Incorrect Access Control...

CVE-2020-20012

WebPlus Pro v1.4.7.8.4-01 is vulnerable to Incorrect Access Control...

CVE-2020-20012

WebPlus Pro v1.4.7.8.4-01 is vulnerable to Incorrect Access Control...

Improper access control

WebPlus Pro v1.4.7.8.4-01 is vulnerable to Incorrect Access Control...

CVE-2020-20012

WebPlus Pro v1.4.7.8.4-01 is vulnerable to Incorrect Access Control...

CVE-2020-20012

CVE-2020-20012 affects WebPlus Pro v1.4.7.8.4-01 and is caused by Incorrect Access Control. The vulnerability is rated CRITICAL (CVSSv3.1: Network, High Confidentiality/Integrity/Availability impacts; no user interaction required). Connected sources confirm the affected product and vulnerability ...

CVE-2020-20012

WebPlus Pro v1.4.7.8.4-01 is vulnerable to Incorrect Access Control...

WebPlus Pro 路径遍历漏洞

WebPlus Pro is WebPlus's series of platform products that help users quickly build a cluster of enterprise-level information portals. A security vulnerability exists in WebPlus Pro v1.4.7.8.4-01, which stems from incorrect access control...

File upload vulnerability in webplus pro

Webplus pro is a content management system. A file upload vulnerability exists in webplus pro, which can be exploited by an attacker to gain server privileges...

Information leakage vulnerability in webplus pro

Webplus pro is a content management system. An information disclosure vulnerability exists in webplus pro, which can be exploited by attackers to obtain sensitive information...

Nanjing Sudi Technology Webplus pro suffers from s2-045 remote command execution vulnerability

NJSU Webplus pro is a content management system. Webplus pro uses Apache Struts xwork as its application framework, and the file upload function of the Jakarta plug-in of this framework has a remote command execution vulnerability s2-045, which can be triggered by modifying the value of...

Sudi Webplus 3 EX website group Content Management System any user password-reset-vulnerability warning-the black bar safety net

Sudi technology Webplus 3 EX website group content management system, the user password retrieve function design flaws lead to arbitrary user password reset. Test operation is as follows: 1. Since we don't have test account, so you need to register an account: the registered address by default is...

Design/Logic Flaw

Webplus aka talentsoft Web+Shop 5.3.6, when Redirect URL for "Script Not Found" Error is not configured, allows remote attackers to obtain sensitive information via a quote ' or possibly other invalid value in the storeid parameter in store.wml in webplus.exe, which reveals the path in a "Script...

CVE-2006-1897

Webplus aka talentsoft Web+Shop 5.3.6, when Redirect URL for "Script Not Found" Error is not configured, allows remote attackers to obtain sensitive information via a quote ' or possibly other invalid value in the storeid parameter in store.wml in webplus.exe, which reveals the path in a "Script...

CVE-2006-1897

Webplus aka talentsoft Web+Shop 5.3.6, when Redirect URL for "Script Not Found" Error is not configured, allows remote attackers to obtain sensitive information via a quote ' or possibly other invalid value in the storeid parameter in store.wml in webplus.exe, which reveals the path in a "Script...

CVE-2006-1897

CVE-2006-1897 affects Webplus (aka talentsoft) Web+Shop 5.3.6. The vulnerability arises when the Redirect URL for the “Script Not Found” error is not configured, allowing remote attackers to cause information disclosure via the storeid parameter in store.wml within webplus.exe, revealing the path...

CVE-2000-0282

The CVE-2000-0282 issue affects TalentSoft Web+ WebPlus CGI (webplus) used in the Web+ shopping cart. The vulnerability is a traversal flaw in the webplus CGI that allows remote attackers to read arbitrary files by using a .. (dot dot) path traversal in the CGI request (e.g., /cgi-bin/webplus?scr...

DST2K0032.txt

============================================================================ Delphis Consulting Plc ============================================================================ Security Team Advisories 19/09/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...