Vulnerabilities > CVE-2007-2777 - Unspecified vulnerability in Alstrasoft Template Seller
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN alstrasoft
exploit available
Summary
Unrestricted file upload vulnerability in admin/addsptemplate.php in AlstraSoft Template Seller Pro 3.25 and earlier allows remote attackers to execute arbitrary PHP code via an arbitrary .php filename in the zip parameter, which is created under sptemplates/.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
Exploit-Db
| description | AlstraSoft Template Seller Pro <= 3.25 Remote Code Execution Exploit. CVE-2007-2777. Webapps exploit for php platform |
| file | exploits/php/webapps/3959.php |
| id | EDB-ID:3959 |
| last seen | 2016-01-31 |
| modified | 2007-05-20 |
| platform | php |
| port | |
| published | 2007-05-20 |
| reporter | BlackHawk |
| source | https://www.exploit-db.com/download/3959/ |
| title | AlstraSoft Template Seller Pro <= 3.25 - Remote Code Execution Exploit |
| type | webapps |
References
- http://osvdb.org/40423
- http://osvdb.org/40423
- http://www.securityfocus.com/bid/24068
- http://www.securityfocus.com/bid/24068
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34398
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34398
- https://www.exploit-db.com/exploits/3959
- https://www.exploit-db.com/exploits/3959