CVE-2007-2776
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2007-2776
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
AlstraSoft Template Seller Pro 3.25 and earlier sends a redirect to the web browser but does not exit when administrative credentials are missing, which allows remote attackers to inject a credential variable setting and obtain administrative access via a direct request to admin/changeinfo.php.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
AlstraSoft Template Seller Pro 'changeinfo.php'漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
AlstraSoft Template Seller Pro 当管理证书丢失时，会在不退出的情况下发送一个重定向到web浏览器，这使得远程攻击者可以借助一个对admin/changeinfo.php的直接请求，注入一个证书变量设置和获得管理访问权限。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2007-2776
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2007-2776
请登录查看更多情报信息。
- http://itablackhawk.altervista.org/exploit/alsoft_exploit_packx_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2007-2776
Same Patch Batch · n/a · 2007-05-21 · 25 CVEs total
| CVE-2007-2786 | IRCD Ratbox IRC Daemon Pending Connections 拒绝服务攻击漏洞 | |
| CVE-2007-2769 | OPeNDAP BES压缩文件远程命令执行漏洞 | |
| CVE-2007-2768 | OpenSSH OPIE信息泄露漏洞 | |
| CVE-2007-2767 | OPeNDAP文件系统枚举信息泄露漏洞 | |
| CVE-2007-2685 | Jetbox CMS 'index.php'多个SQL注入漏洞 | |
| CVE-2007-2684 | Jetbox CMS version 'opentree.php'多路径破解漏洞 | |
| CVE-2007-1355 | Apache Tomcat Documentation Sample 'hello.jsp' 应用程序多个跨站脚本攻击漏洞 | |
| CVE-2003-1329 | wu-ftpd漏洞 wu-ftpd ftpd.c漏洞 | |
| CVE-2007-2772 | CA BrightStor ARCserve Backup Mediasvr.exe and caloggerd.exe 拒绝服务攻击漏洞 | |
| CVE-2007-2771 | LEAD Technologies LeadTools JPEG 2000 LEADJ2K.LEADJ2K.140 ActiveX控件栈缓冲区溢出漏洞 | |
| CVE-2007-2770 | Eudora SMTP回复存在栈缓冲区溢出漏洞 | |
| CVE-2007-2787 | LeadTools Raster Thumbnail Object Library 栈缓冲区溢出漏洞 | |
| CVE-2007-2773 | Zomplog 'mp3playlist.php' SQL注入漏洞 | |
| CVE-2007-2785 | eSyndiCat Pro 'manage-admins.php'漏洞 | |
| CVE-2007-2784 | Globus Toolkit Nexus Globus-Job-Manager远程拒绝服务漏洞 | |
| CVE-2007-2783 | Rational Software Hidden Administrator远程绕过认证漏洞 | |
| CVE-2007-2782 | Packeteer PacketShaper TCP协议栈可预测初始序列号漏洞 | |
| CVE-2007-2781 | WikyBlog 'sessionRegister.php' 跨站脚本攻击漏洞 | |
| CVE-2007-2780 | PsychoStats 'Server.PHP' 路径泄露漏洞 | |
| CVE-2007-2779 | Libstats 'Template_CSV.PHP' 远程文件包含漏洞 |
Showing top 20 of 25 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8276
bettercap MySQL Server mysql_server.go integer coercion - CVE-2026-8275
bettercap zerogod IPP Service zerogod_ipp_primitives.go ippR - CVE-2026-8270
Open5GS SMF ogs_nas_parse_qos_rules denial of service - CVE-2026-8269
Open5GS SMF smf_nsmf_handle_create_sm_context denial of serv - CVE-2026-8268
Open5GS SMF OpenAPI_list_create denial of service
V. Comments for CVE-2007-2776
No comments yet