CVE-2007-2776

The CVE-2007-2776 entry concerns AlstraSoft Template Seller Pro (version 3.25 and earlier). A flaw in the redirect/exit handling when administrative credentials are missing allows a remote attacker to craft a request that injects a credential variable setting and gains administrative access via a...