CVE-2000-0282

Medium

Published: 12/04/2000(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

7.77%

94th percentile - higher than 94% of all known CVEs

Summary

The webpsvr daemon in the Web+ shopping cart application allows remote attackers to read arbitrary files via a .. (dot dot) attack on the webplus CGI program.

Risk Assessment

Attackers may gain access to sensitive data on the server, potentially compromising the confidentiality of information within the organization.

Recommendation

It is recommended to update the Web+ application to the latest version and implement appropriate security measures to block .. (dot dot) attacks.

Original NVD description (English source)

TalentSoft webpsvr daemon in the Web+ shopping cart application allows remote attackers to read arbitrary files via a .. (dot dot) attack on the webplus CGI program.