Lucene search
HistoryMay 21, 2007 - 11:30 p.m.
CVE-2007-2777
vulnerability
file upload
alstrasoft
template seller pro
cve-2007-2777
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.7 High
AI Score
Confidence
High
0.047 Low
EPSS
Percentile
92.7%
Unrestricted file upload vulnerability in admin/addsptemplate.php in AlstraSoft Template Seller Pro 3.25 and earlier allows remote attackers to execute arbitrary PHP code via an arbitrary .php filename in the zip parameter, which is created under sptemplates/.
Affected configurations
Node
alstrasofttemplate_sellerRange≤3.25pro
| CPE | Name | Operator | Version |
|---|---|---|---|
| alstrasoft:template_seller | alstrasoft template seller | le | 3.25 |
Related
nvd
nvd
CVE-2007-2777
2007-05-21 23:30:00
prion
prion
Unrestricted file upload
2007-05-21 23:30:00
cvelist
cvelist
CVE-2007-2777
2007-05-21 23:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.7 High
AI Score
Confidence
High
0.047 Low
EPSS
Percentile
92.7%
Related for CVE-2007-2777