MediumCVSS 5.0
EPSS 7.8%
Public exploit
TalentSoft webpsvr daemon in the Web+ shopping cart application allows remote attackers to read arbitrary files via a .. (dot dot) attack on the webplus CGI program.