Lucene search
HistoryOct 03, 2022 - 4:22 p.m.
CVE-2005-4814
cve-2005-4814
segue cms
file upload vulnerability
apache http server
php interpreter
remote code execution
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.9 High
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
73.7%
Unrestricted file upload vulnerability in Segue CMS before 1.3.6, when the Apache HTTP Server handles .phtml files with the PHP interpreter, allows remote attackers to upload and execute arbitrary PHP code by placing .phtml files in the userfiles/ directory.
Affected configurations
Node
middlebury_collegesegue_cmsRange≤1.3.5
| CPE | Name | Operator | Version |
|---|---|---|---|
| middlebury_college:segue_cms | middlebury college segue cms | le | 1.3.5 |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.9 High
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
73.7%
Related for CVE-2005-4814