Back to search
CVE-2006-1897
Published: Apr 20, 2006
Modified: Aug 7, 2024
PUBLISHED
Description
Webplus (aka talentsoft) Web+Shop 5.3.6, when Redirect URL for "Script Not Found" Error is not configured, allows remote attackers to obtain sensitive information via a quote (') or possibly other invalid value in the storeid parameter in store.wml in webplus.exe, which reveals the path in a "Script Not Found" error message.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
webplusshop-webplus-path-disclosure(25802)
vdb-entry
x_refsource_XF
703
third-party-advisory
x_refsource_SREASON
20060413 TalentSoft Web+Shop Path Disclosure
mailing-list
x_refsource_BUGTRAQ
761
third-party-advisory
x_refsource_SREASON
24621
vdb-entry
x_refsource_OSVDB
19662
third-party-advisory
x_refsource_SECUNIA
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now