Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Webplus (aka talentsoft) Web+Shop 5.3.6, when Redirect URL for "Script Not Found" Error is not configured, allows remote attackers to obtain sensitive information via a quote (') or possibly other invalid value in the storeid parameter in store.wml in webplus.exe, which reveals the path in a "Script Not Found" error message.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Webplus Web+Shop 信息泄露漏洞
Vulnerability Description
当不为"未发现脚本"配置重定向URL时，Webplus (即talentsoft) Web+Shop 5.3.6允许远程攻击者借助于单引号(')或webplus.exe中的store.wml 中的storeid 参数中可能无效值获取敏感信息。该漏洞在错误信息"未发现脚本"中泄漏了路径信息。
CVSS Information
N/A
Vulnerability Type
N/A