EUVD-2006-1683

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in webplus.exe in TalentSoft Web+Shop 5.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the deptname parameter, possibly involving the webpshop/ department.wml script...

CVE-2002-0449

CVE-2002-0449 affects Talentsoft Web+ up to version 5.0, where a buffer overflow in the Web+ component webpsvc.exe (triggered via a crafted URI in webplus.exe ) allows remote code execution. The vulnerability can execute code with the privileges of the user running webpsvc.exe (often SYSTEM). CER...