## Description

TalentSoft webpsvr daemon in the Web+ shopping cart application allows remote attackers to read arbitrary files via a .. (dot dot) attack on the webplus CGI program.

## Severity

Overall Severity: N/A

### CVSS Metrics

Type | Score | Severity | Vector
--- | --- | --- | ---

## Affected Products

### talentsoft - web\+

Affected Versions:

- 4

## References

- ftp://ftp.talentsoft.com/Download/Webplus/Unix/Patches/Webplus46p%20Read%20me.html
- http://archives.neohapsis.com/archives/bugtraq/2000-04/0050.html
  Exploit Patch Vendor Advisory
- http://www.securityfocus.com/bid/1102
  Exploit Patch Vendor Advisory
- ftp://ftp.talentsoft.com/Download/Webplus/Unix/Patches/Webplus46p%20Read%20me.html
- http://archives.neohapsis.com/archives/bugtraq/2000-04/0050.html
  Exploit Patch Vendor Advisory
- http://www.securityfocus.com/bid/1102
  Exploit Patch Vendor Advisory

Neural Processor Active