What’s Vulnerable › Vulnerabilities

CVE-2007-2777

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 6.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2007-05-21 · updated 2026-06-16

Description

Unrestricted file upload vulnerability in admin/addsptemplate.php in AlstraSoft Template Seller Pro 3.25 and earlier allows remote attackers to execute arbitrary PHP code via an arbitrary .php filename in the zip parameter, which is created under sptemplates/.

Affected products

• Alstrasoft Template Seller: through 3.25

References

• http://osvdb.org/40423
• http://www.securityfocus.com/bid/24068
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34398
• https://www.exploit-db.com/exploits/3959
• http://osvdb.org/40423
• http://www.securityfocus.com/bid/24068
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34398
• https://www.exploit-db.com/exploits/3959

Get alerted when CVE-2007-2777 or the next vulnerability affects your stack