GCVE - cpe:2.3:a:alstrasoft:template_seller:3.25:*:pro:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:alstrasoft:template_seller:3.25:*:pro:*:*:*:*:*

part: a version: 3.25 update: *

Vendor	Alstrasoft (`a4963e9f-6c7e-59f9-91ba-7bec89015e6d`)
Product	Template Seller (`11214aae-9737-5ca2-a527-ef03bca336b3`)
Edition	pro
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-4591`	vulnerable	2026-06-03 14:27:43.338032	Details available Multiple PHP remote file inclusion vulnerabilities in AlstraSoft Template Seller, and possibly AltraSoft Template Seller Pro 3.25, allow remote attackers to execute arbitrary PHP code via a URL in the config[template_path] parameter to (1) payment/payment_result.php or (2) /payment/spuser_result.php. Published: 2006-09-06T22:00:00.000Z Updated: 2024-08-07T19:14:47.574Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/19769 http://www.securityfocus.com/archive/1/445156/100/0/threaded http://securityreason.com/securityalert/1509	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-3798`	vulnerable	2026-06-03 14:27:11.355854	Details available SQL injection vulnerability in admin/index.php in AlstraSoft Template Seller Pro 3.25 allows remote attackers to execute arbitrary SQL commands via the username field. Published: 2005-11-24T11:00:00.000Z Updated: 2024-08-07T23:24:36.249Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/15442/ http://securityreason.com/securityalert/189 https://exchange.xforce.ibmcloud.com/vulnerabilities/23071 http://myblog.it-security23.net/?postid=6 http://www.vupen.com/english/advisories/2005/2456	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-3797`	vulnerable	2026-06-03 14:27:11.355430	Details available PHP remote file inclusion vulnerability in payment_paypal.php in AlstraSoft Template Seller Pro 3.25 allows remote attackers to execute arbitrary PHP code via the config[basepath] parameter. Published: 2005-11-24T11:00:00.000Z Updated: 2024-08-07T23:24:36.539Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/189 http://www.securityfocus.com/bid/15441 http://myblog.it-security23.net/?postid=6 http://www.vupen.com/english/advisories/2005/2456 http://www.osvdb.org/20895	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.