CyberSec.Space Logo
Back to CVE Browser

CVE-2005-3798

HIGH
7.5
CVSS Severity Score
EPSS Score0.0420%
EPSS Percentile23.80th
PublishedNov 24, 2005
Last ModifiedApr 16, 2026

Vulnerability Description

SQL injection vulnerability in admin/index.php in AlstraSoft Template Seller Pro 3.25 allows remote attackers to execute arbitrary SQL commands via the username field.

Affected Platforms (CPE)

📦
Alstrasoft

Template Seller

= 3.25

References & Advisories

🔗 http://marc.info/?l=bugtraq&m=113209710803581&w=2
🔗 http://myblog.it-security23.net/?postid=6
🔗 http://secunia.com/advisories/17603/
🔗 http://securityreason.com/securityalert/189
🔗 http://www.osvdb.org/20896
🔗 http://www.securityfocus.com/bid/15442/
🔗 http://www.vupen.com/english/advisories/2005/2456
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/23071

Related Vulnerabilities

CVE-2007-277610.0

AlstraSoft Template Seller Pro 3.25 and earlier sends a redirect to the web browser but does not exit when administrative credenti...

CVE-2005-37977.5

PHP remote file inclusion vulnerability in payment_paypal.php in AlstraSoft Template Seller Pro 3.25 allows remote attackers to ex...

CVE-2006-45917.5

Multiple PHP remote file inclusion vulnerabilities in AlstraSoft Template Seller, and possibly AltraSoft Template Seller Pro 3.25,...

CVE-2007-27777.5

Unrestricted file upload vulnerability in admin/addsptemplate.php in AlstraSoft Template Seller Pro 3.25 and earlier allows remote...