← Back to CVEs

CVE-2007-2777

N/A

Description

Unrestricted file upload vulnerability in admin/addsptemplate.php in AlstraSoft Template Seller Pro 3.25 and earlier allows remote attackers to execute arbitrary PHP code via an arbitrary .php filename in the zip parameter, which is created under sptemplates/.

CVE Details

CVSS v3.1 ScoreN/A

Published5/21/2007

Last Modified4/9/2025

Sourcenvd

Honeypot Sightings0

Affected Products

alstrasoft:template_seller

References

http://osvdb.org/40423(cve@mitre.org)

http://www.securityfocus.com/bid/24068(cve@mitre.org)

https://exchange.xforce.ibmcloud.com/vulnerabilities/34398(cve@mitre.org)

https://www.exploit-db.com/exploits/3959(cve@mitre.org)

http://osvdb.org/40423(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/24068(af854a3a-2127-422b-91ae-364da2661108)

https://exchange.xforce.ibmcloud.com/vulnerabilities/34398(af854a3a-2127-422b-91ae-364da2661108)

https://www.exploit-db.com/exploits/3959(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.