Test ID:	10373
Category:	Web application abuses
Title:	TalentSoft Web+ version detection
Summary:	This plug-in detects the version of Web+ CGI. The Web+ CGI has a known; vulnerability that enables a remote attacker to gain access to local files.;; This test in itself does not verify the vulnerability but rather tries to; discover the version of Web+ which is installed.
Description:	Summary: This plug-in detects the version of Web+ CGI. The Web+ CGI has a known vulnerability that enables a remote attacker to gain access to local files. This test in itself does not verify the vulnerability but rather tries to discover the version of Web+ which is installed. Affected Software/OS: This bug is known to exist in Web+ 4.X as of March 1999, and probably exists in all previous versions as well. Solution: No known solution was made available for at least one year since the disclosure of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one. CVSS Score: 3.3 CVSS Vector: AV:L/AC:M/Au:N/C:N/I:P/A:P
Copyright	Copyright (C) 2000 SecuriTeam

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.