CVE-2006-0222

The CVE-2006-0222 entry concerns an XSS vulnerability in AlstraSoft Template Seller Pro, affecting the fullview.php script where the tempid parameter can be exploited to inject arbitrary web script/HTML. Affected product: AlstraSoft Template Seller Pro; vulnerable component: fullview.php; entry d...

CVE-2006-4591

CVE-2006-4591 affects AlstraSoft Template Seller (and possibly AltraSoft Template Seller Pro 3.25). The vulnerability is a PHP remote file inclusion via a URL in config[template_path] used by payment_result.php and spuser_result.php, enabling arbitrary PHP code execution. NVD lists a CVSS2 base s...