Alstrasoft

Records56All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high24CVSS 7.0–8.9

Exploited now

Alstrasoft records in CISA KEV

No Alstrasoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Affiliate Network Pro 8 records LOW Video Share Enterprise 7 records LOW Webhost Directory 7 records LOW E-friends 6 records MEDIUM Template Seller 6 records MEDIUM Article Manager Pro 5 records MEDIUM Epay 5 records LOW Askme Pro 3 records LOW

Records

6 records in Template Seller · all components

TI-2007-02687 CVE-2007-2776 · GHSA-f7pf-c3hc-f37c

AlstraSoft Template Seller Pro 3.25 and earlier sends a redirect to the web browser but…

MEDIUM 54

AlstraSoft Template Seller Pro 3.25 and earlier sends a redirect to the web browser but does not exit when administrative credentials are missing, which allows remote attackers to inject a credential variable setting and…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.08615 Published 2007-05-21 No fix listed

TI-2007-02688 CVE-2007-2777 · GHSA-jg2m-4r5v-h2j3

Unrestricted file upload vulnerability in admin/addsptemplate.php in AlstraSoft Template…

MEDIUM 42

Unrestricted file upload vulnerability in admin/addsptemplate.php in AlstraSoft Template Seller Pro 3.25 and earlier allows remote attackers to execute arbitrary PHP code via an arbitrary .php filename in the zip paramet…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0632 Published 2007-05-21 No fix listed

TI-2005-03591 CVE-2005-3797 · GHSA-wfvr-5v36-c4rf

PHP remote file inclusion vulnerability in payment_paypal.php in AlstraSoft Template…

LOW 39

PHP remote file inclusion vulnerability in payment_paypal.php in AlstraSoft Template Seller Pro 3.25 allows remote attackers to execute arbitrary PHP code via the config[basepath] parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03781 Published 2005-11-24 No fix listed

TI-2006-04437 CVE-2006-4591 · GHSA-q579-6g69-whmh

Multiple PHP remote file inclusion vulnerabilities in AlstraSoft Template Seller, and…

LOW 38

Multiple PHP remote file inclusion vulnerabilities in AlstraSoft Template Seller, and possibly AltraSoft Template Seller Pro 3.25, allow remote attackers to execute arbitrary PHP code via a URL in the config[template_pat…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02582 Published 2006-09-06 No fix listed

TI-2005-03592 CVE-2005-3798 · GHSA-rqvh-vg3g-hfj7

SQL injection vulnerability in admin/index.php in AlstraSoft Template Seller Pro 3.25…

LOW 36

SQL injection vulnerability in admin/index.php in AlstraSoft Template Seller Pro 3.25 allows remote attackers to execute arbitrary SQL commands via the username field.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01447 Published 2005-11-24 No fix listed

TI-2006-00213 CVE-2006-0222 · GHSA-qvc3-3gw4-285x

Cross-site scripting (XSS) vulnerability in fullview.php in AlstraSoft Template Seller…

LOW 24

Cross-site scripting (XSS) vulnerability in fullview.php in AlstraSoft Template Seller Pro allows remote attackers to inject arbitrary web script or HTML via the tempid parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01736 Published 2006-01-16 No fix listed

Open these records in search →

Critical	4
High	24
Medium	28
Low	0
No CVSS	0