CVE-2007-2777 | BDVDB-2026-24286 Detail

Description#

Unrestricted file upload vulnerability in admin/addsptemplate.php in AlstraSoft Template Seller Pro 3.25 and earlier allows remote attackers to execute arbitrary PHP code via an arbitrary .php filename in the zip parameter, which is created under sptemplates/.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/24068
https://exchange.xforce.ibmcloud.com/vulnerabilities/34398
http://osvdb.org/40423
https://www.exploit-db.com/exploits/3959

Exploit#

https://www.exploit-db.com/exploits/3959

History#

Version 12007-05-21Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.