template_seller Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/template_seller/ Sun, 26 Feb 2023 09:06:27 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png template_seller Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/template_seller/ 32 32 CVE-2007-2776 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-2776/ Sun, 26 Feb 2023 09:06:27 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-2776/ AlstraSoft Template Seller Pro 3.25 and earlier sends a redirect to the web browser but does not exit when administrative credentials are missing, which allows remote attackers to inject a credential variable setting and obtain administrative access via a direct request to admin/changeinfo.php.

The post CVE-2007-2776 appeared first on CVE Vulnerability.

]]> AlstraSoft Template Seller Pro 3.25 and earlier sends a redirect to the web browser but does not exit when administrative credentials are missing, which allows remote attackers to inject a credential variable setting and obtain administrative access via a direct request to admin/changeinfo.php.

The post CVE-2007-2776 appeared first on CVE Vulnerability.

]]> CVE-2007-2777 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-2777/ Sun, 26 Feb 2023 09:06:27 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-2777/ Unrestricted file upload vulnerability in admin/addsptemplate.php in AlstraSoft Template Seller Pro 3.25 and earlier allows remote attackers to execute arbitrary PHP code via an arbitrary .php filename in the zip parameter, which is created under sptemplates/.

The post CVE-2007-2777 appeared first on CVE Vulnerability.

]]> Unrestricted file upload vulnerability in admin/addsptemplate.php in AlstraSoft Template Seller Pro 3.25 and earlier allows remote attackers to execute arbitrary PHP code via an arbitrary .php filename in the zip parameter, which is created under sptemplates/.

The post CVE-2007-2777 appeared first on CVE Vulnerability.

]]>