CVE:CVE-2006-4591
CNNVD:CNNVD-200609-069
AlstraSoft Template Seller可能还有AltraSoft Template Seller Pro 3.25中的多个PHP远程文件包含漏洞，远程攻击者可以通过(1) payment/payment_result.php或(2)/payment/spuser_result.php的config[template_path] 参数中的URL执行任意PHP代码。
solution:Upgrade alstrasoft template_seller to a higher version than *,3.25,and avoid the version 3.25