CVE-2000-0282: Talentsoft Web+

Medium severity, CVSS 5.0. EPSS: 7.8% chance of exploitation in the next 30 days.

TalentSoft webpsvr daemon in the Web+ shopping cart application allows remote attackers to read arbitrary files via a .. (dot dot) attack on the webplus CGI program.

Affected products

• Talentsoft Web+: version 4 only

Published 2000-04-12. Last modified 2026-06-16.