CVE-2006-4591

Multiple PHP remote file inclusion vulnerabilities in AlstraSoft Template Seller, and possibly AltraSoft Template Seller Pro 3.25, allow remote attackers to execute arbitrary PHP code via a URL in the config[template_path] parameter to (1) payment/payment_result.php or (2) /payment/spuser_result.php.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:alstrasoft:template_seller:3.25:*:pro:*:*:*:*:*
cpe:2.3:a:alstrasoft:template_seller:*:*:*:*:*:*:*:*
cpe:2.3:a:alstrasoft:template_seller:*:*:pro:*:*:*:*:*

Information

Published : 2006-09-06 15:04

Updated : 2018-10-17 14:38


NVD link : CVE-2006-4591

Mitre link : CVE-2006-4591


JSON object : View

Advertisement

dedicated server usa

Products Affected

alstrasoft

  • template_seller