Skip to main content

Vendor/product archive

middlebury_college / segue_cms CVEs

Beta · best-effort

5 CVEs tagged to middlebury_college / segue_cms0 Critical, 4 High, 1 Medium, 0 Low, 0 Unrated.

CVE-2006-5722

Published Nov 4, 2006

Multiple PHP remote file inclusion vulnerabilities in Segue CMS 1.5.9 and earlier, when magic_quotes_gpc is enabled, allow remote attackers to execute arbitrary PHP code via a URL…

CVSS 5.1 · Medium
Vendor/product tagsBeta · best-effort

CVE-2006-5490

Published Oct 25, 2006

Multiple SQL injection vulnerabilities in Segue Content Management System (CMS) before 1.5.8 allow remote attackers to execute arbitrary SQL commands via unspecified vectors.

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort

CVE-2006-5497

Published Oct 25, 2006

PHP remote file inclusion vulnerability in themes/program/themesettings.inc.php in Segue CMS 1.5.8 and earlier, when register_globals is enabled, allows remote attackers to execut…

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort

CVE-2006-5498

Published Oct 25, 2006

Directory traversal vulnerability in themes/program/themesettings.inc.php in Segue CMS 1.5.8 and earlier allows remote attackers to include and execute arbitrary local files via a…

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort

CVE-2005-4814

Published Dec 31, 2005

Unrestricted file upload vulnerability in Segue CMS before 1.3.6, when the Apache HTTP Server handles .phtml files with the PHP interpreter, allows remote attackers to upload and…

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort
Showing 1-5 of 5 CVEsPage 1 of 1