58 matches found
CVE-2012-1254: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Segue 2.2.10.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Segue vulnerable to SQL injection
Overview Segue contains a SQL injection vulnerability. Segue is a content management system. Segue contains a SQL injection vulnerability. Daiki Fukumori of Cyber Defense Institute, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early...
Segue vulnerable to cross-site scripting
Overview Segue contains a cross-site scripting vulnerability. Segue is a content management system. Segue contains a cross-site scripting vulnerability. Daiki Fukumori of Cyber Defense Institute, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...
Segue CMS themesdir Parameter Remote File Include Vulnerability
The remote web server contains a PHP script that is affected by a remote file include issue. Description: The remote web server is running Segue CMS, an open source content management system tailored for educational institutions. The version of Segue CMS installed on the remote host fails to...
Segue CMS themesdir Parameter Remote File Include Vulnerability
The remote web server contains a PHP script that is affected by a remote file include issue. Description: The remote web server is running Segue CMS, an open source content management system tailored for educational institutions. The version of Segue CMS installed on the remote host fails to...
Remote file inclusion
PHP remote file inclusion vulnerability in index.php in Segue CMS 1.8.4 and earlier, when registerglobals is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the themesdir parameter, a different vector than CVE-2006-5497. NOTE: this issue was disputed, but the dispute...
CVE-2007-5186
PHP remote file inclusion vulnerability in index.php in Segue CMS 1.8.4 and earlier, when registerglobals is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the themesdir parameter, a different vector than CVE-2006-5497. NOTE: this issue was disputed, but the dispute...
Immunity Canvas: SEGUE_INCLUDE
Name| segueinclude ---|--- CVE| CVE-2007-5186 Exploit Pack| CANVAS Description| Segue remote file include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: Segue CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5186 CVE Name: CVE-2007-5186...
CVE-2007-5186
Segue CMS suffers a PHP remote file inclusion via the themesdir parameter in index.php (and related themes/settings scripts) for versions 1.8.4 and earlier. The underlying issue is unsanitized input used to include PHP code in themes/program/themesettings.inc.php, which can enable arbitrary code ...
CVE-2007-5186
PHP remote file inclusion vulnerability in index.php in Segue CMS 1.8.4 and earlier, when registerglobals is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the themesdir parameter, a different vector than CVE-2006-5497. NOTE: this issue was disputed, but the dispute...
Segue CMS <= 1.8.4 index.php Remote File Inclusion Vulnerability
No description provided by source. ?????????? ??????????????? ??????????????????? ??????????????????????? ?????????????????????????? ?????????????????????????????? ????????????????????????????????? ??????????????????????????????????? ?????????????????????????????????????...
CVE-2007-5186: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in index.php in Segue CMS 1.8.4 and earlier, when registerglobals is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the themesdir parameter, a different vector than CVE-2006-5497. NOTE: this issue was disputed, but the dispute...
Segue CMS <= 1.8.4 index.php Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ================================================================ Segue CMS = 1.8.4 index.php Remote File Inclusion Vulnerability ================================================================ ?????????? ??????????????? ??????????????????...
Segue CMS 1.8.4 - 'index.php' Remote File Inclusion
?????????? ??????????????? ??????????????????? ??????????????????????? ?????????????????????????? ?????????????????????????????? ????????????????????????????????? ??????????????????????????????????? ????????????????????????????????????? ???????????????????????????????????????...
Segue CMS 1.8.4 - index.php Remote File Inclusion
Segue CMS 1.8.4 - index.php Remote File Inclusion ?????????? ??????????????? ??????????????????? ??????????????????????? ?????????????????????????? ?????????????????????????????? ????????????????????????????????? ??????????????????????????????????? ?????????????????????????????????????...
CVE-2006-5722
Multiple PHP remote file inclusion vulnerabilities in Segue CMS 1.5.9 and earlier, when magicquotesgpc is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the theme parameter to 1 themesettings.php or 2 index.php, a different vector than CVE-2006-5497. NOTE: the provenan...
CVE-2006-5722
Multiple PHP remote file inclusion vulnerabilities in Segue CMS 1.5.9 and earlier, when magicquotesgpc is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the theme parameter to 1 themesettings.php or 2 index.php, a different vector than CVE-2006-5497. NOTE: the provenan...
CVE-2006-5722
Summary: Segue CMS 1.5.9 and earlier exposes multiple remote file inclusion vulnerabilities. The issue stems from unsanitized input in the themesdir/theme-related include paths (themesettings.inc.php and index.php), enabling an attacker to inject arbitrary PHP code via a URL parameter. Documented...
CVE-2006-5722: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in Segue CMS 1.5.9 and earlier, when magicquotesgpc is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the theme parameter to 1 themesettings.php or 2 index.php, a different vector than CVE-2006-5497. NOTE: the provenan...