Vulnerabilities

TI-2006-05507 CVE-2006-5722 · GHSA-jcpj-35gg-r7f5

Multiple PHP remote file inclusion vulnerabilities in Segue CMS 1.5.9 and earlier, when…

LOW 27

Multiple PHP remote file inclusion vulnerabilities in Segue CMS 1.5.9 and earlier, when magic_quotes_gpc is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the theme parameter to (1) themesetti…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.0207 Published 2006-11-04 No fix listed

TI-2005-04544 CVE-2005-4814 · GHSA-p37h-9c34-5f75

Unrestricted file upload vulnerability in Segue CMS before 1.3.6, when the Apache HTTP…

LOW 35

Unrestricted file upload vulnerability in Segue CMS before 1.3.6, when the Apache HTTP Server handles .phtml files with the PHP interpreter, allows remote attackers to upload and execute arbitrary PHP code by placing .ph…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01296 Published 2006-10-31 No fix listed

TI-2006-05309 CVE-2006-5498 · GHSA-966c-h9h3-gqm8

Directory traversal vulnerability in themes/program/themesettings.inc.php in Segue CMS…

LOW 36

Directory traversal vulnerability in themes/program/themesettings.inc.php in Segue CMS 1.5.8 and earlier allows remote attackers to include and execute arbitrary local files via a ..

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01692 Published 2006-10-25 No fix listed

TI-2006-05308 CVE-2006-5497 · GHSA-6cvp-5v5q-hgcf

PHP remote file inclusion vulnerability in themes/program/themesettings.inc.php in Segue…

LOW 39

PHP remote file inclusion vulnerability in themes/program/themesettings.inc.php in Segue CMS 1.5.8 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the the…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03292 Published 2006-10-25 No fix listed

TI-2006-05301 CVE-2006-5490 · GHSA-2jgx-pw84-cwpp

Multiple SQL injection vulnerabilities in Segue Content Management System (CMS) before…