NVD

Id
54941  
Name
CVE-2007-2777  
Description
Unrestricted file upload vulnerability in admin/addsptemplate.php in AlstraSoft Template Seller Pro 3.25 and earlier allows remote attackers to execute arbitrary PHP code via an arbitrary .php filename in the zip parameter, which is created under sptemplates/.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-05-21  
Modified Date
2011-03-07  
Seq
2007-2777  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
278853 54941 CVE-2007-2777 3959  View
278854 54941 CVE-2007-2777 24068  View
278855 54941 CVE-2007-2777 alstrasoft-template-addstemp-file-upload(34398)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
53358 JVNDB-2007-002050 AlstraSoft Template Seller Pro の admin/addsptemplate.php における無制限にファイルをアップロードされる脆弱性 AlstraSoft Template Seller Pro の admin/addsptemplate.php は、無制限にファイルをアップロードされる脆弱性が存在します。 CVE-2007-2777 26132 CVE-2007-2777 54941 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002050.html 2007-05-21 2012-06-26 View