CVE-2006-1897

Webplus (aka talentsoft) Web+Shop 5.3.6, when Redirect URL for "Script Not Found" Error is not configured, allows remote attackers to obtain sensitive information via a quote (') or possibly other invalid value in the storeid parameter in store.wml in webplus.exe, which reveals the path in a "Script Not Found" error message.

🔗 References (12)

• cve@mitrehttp://secunia.com/advisories/19662
• cve@mitrehttp://securityreason.com/securityalert/703
• cve@mitrehttp://securityreason.com/securityalert/761
• cve@mitrehttp://www.osvdb.org/24621
• cve@mitrehttp://www.securityfocus.com/archive/1/430880/100/0/threaded
• cve@mitrehttps://exchange.xforce.ibmcloud.com/vulnerabilities/25802
• af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/19662
• af854a3a-2127-422b-91ae-364da2661108http://securityreason.com/securityalert/703
• af854a3a-2127-422b-91ae-364da2661108http://securityreason.com/securityalert/761
• af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/24621
• af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/archive/1/430880/100/0/threaded
• af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/25802