CVE-2008-6932: Alstrasoft Sendit

High severity, CVSS 7.5. EPSS: 4.8% chance of exploitation in the next 30 days.

Unrestricted file upload vulnerability in submit_file.php in AlstraSoft SendIt Pro allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in send/files/.

Affected products

• Alstrasoft Sendit: any version

Published 2009-08-11. Last modified 2026-06-16.