Skip to content
Noroxi

talentsoft records

6 published records for vendor talentsoft.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
3
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

      The weakness classes this vendor ships most often: where to look.

      CWE

      Attack profile

      All records

      6 records
      • Buffer overflow in webpsvc.exe for Talentsoft Web+ 5.0 and earlier allows remote attackers to execute arbitrary code via a long argument to

        CriticalCVSS 10.0No exploitEPSS 8%

        talentsoft · web\+ serverJul 26, 2002

      • Buffer overflow in Talentsoft Web+ 5.0 allows remote attackers to execute arbitrary code via an HTTP request with a long cookie.

        CriticalCVSS 10.0No exploitEPSS 5%

        talentsoft · web\+ serverAug 12, 2002

      • Buffer overflow in Talentsoft Web+ 5.0 and earlier allows remote attackers to execute arbitrary code via a long Web Markup Language (wml) fi

        CriticalCVSS 10.0No exploitEPSS 5%

        talentsoft · web\+ serverJul 26, 2002

      • CVE-2000-0282
        22Monitor

        TalentSoft webpsvr daemon in the Web+ shopping cart application allows remote attackers to read arbitrary files via a ..

        MediumCVSS 5.0Proof of conceptEPSS 7%

        talentsoft · web\+Apr 12, 2000

      • CVE-2006-1897
        21Monitor

        Webplus (aka talentsoft) Web+Shop 5.3.6, when Redirect URL for "Script Not Found" Error is not configured, allows remote attackers to obtain

        MediumCVSS 5.0No exploitEPSS 1%

        talentsoft · web\+ shopApr 20, 2006

      • CVE-2006-1682
        18Monitor

        Cross-site scripting (XSS) vulnerability in webplus.exe in TalentSoft Web+Shop 5.0 and earlier allows remote attackers to inject arbitrary w

        MediumCVSS 4.3Proof of conceptEPSS 1%

        talentsoft · web\+ shopApr 10, 2006