| Package | Affected versions | Patched versions |
|---|---|---|
| web+ | = 4 |
TalentSoft webpsvr daemon in the Web+ shopping cart application allows remote attackers to read arbitrary files via a .. (dot dot) attack on the webplus CGI program.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free