Vulnerability   
Search   
    Search 172616 CVE descriptions
and 81291 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:10367
Category:CGI abuses
Title:TalentSoft Web+ Input Validation Bug Vulnerability
Summary:NOSUMMARY
Description:Description:
The 'webplus' CGI allows an attacker
to view any file on the target computer by requesting :

GET /cgi-bin/webplus?script=/../../../../etc/passwd

Solution : remove it

Risk factor : Medium


Cross-Ref: BugTraq ID: 1102
Common Vulnerability Exposure (CVE) ID: CVE-2000-0282
http://www.securityfocus.com/bid/1102
Bugtraq: 20000412 TalentSoft Web+ Input Validation Bug Vulnerability (Google Search)
http://archives.neohapsis.com/archives/bugtraq/2000-04/0050.html
XForce ISS Database: talentsoft-web-input
CopyrightThis script is Copyright (C) 2000 Renaud Deraison

This is only one of 81291 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2020 E-Soft Inc. All rights reserved.