CVE-2006-4591

Multiple PHP remote file inclusion vulnerabilities in AlstraSoft Template Seller, and possibly AltraSoft Template Seller Pro 3.25, allow remote attackers to execute arbitrary PHP code via a URL in the configtemplatepath parameter to 1 payment/paymentresult.php or 2 /payment/spuserresult.php...

CVE-2006-4591

CVE-2006-4591 affects AlstraSoft Template Seller (and possibly AltraSoft Template Seller Pro 3.25). The vulnerability is a PHP remote file inclusion via a URL in config[template_path] used by payment_result.php and spuser_result.php, enabling arbitrary PHP code execution. NVD lists a CVSS2 base s...