CyberSec.Space Logo
Back to CVE Browser

CVE-2005-3797

HIGH
7.5
CVSS Severity Score
EPSS Score0.0850%
EPSS Percentile21.77th
PublishedNov 24, 2005
Last ModifiedApr 16, 2026

Vulnerability Description

PHP remote file inclusion vulnerability in payment_paypal.php in AlstraSoft Template Seller Pro 3.25 allows remote attackers to execute arbitrary PHP code via the config[basepath] parameter.

Affected Platforms (CPE)

📦
Alstrasoft

Template Seller

= 3.25

References & Advisories

🔗 http://marc.info/?l=bugtraq&m=113209710803581&w=2
🔗 http://myblog.it-security23.net/?postid=6
🔗 http://secunia.com/advisories/17603/
🔗 http://securityreason.com/securityalert/189
🔗 http://www.osvdb.org/20895
🔗 http://www.securityfocus.com/bid/15441
🔗 http://www.vupen.com/english/advisories/2005/2456
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/23069

Related Vulnerabilities

CVE-2007-277610.0

AlstraSoft Template Seller Pro 3.25 and earlier sends a redirect to the web browser but does not exit when administrative credenti...

CVE-2005-37987.5

SQL injection vulnerability in admin/index.php in AlstraSoft Template Seller Pro 3.25 allows remote attackers to execute arbitrary...

CVE-2006-45917.5

Multiple PHP remote file inclusion vulnerabilities in AlstraSoft Template Seller, and possibly AltraSoft Template Seller Pro 3.25,...

CVE-2007-27777.5

Unrestricted file upload vulnerability in admin/addsptemplate.php in AlstraSoft Template Seller Pro 3.25 and earlier allows remote...