CVE-2005-4814: Undefined Security Weakness

Unrestricted file upload vulnerability in Segue CMS before 1.3.6, when the Apache HTTP Server handles .phtml files with the PHP interpreter, allows remote attackers to upload and execute arbitrary PHP code by placing .phtml files in the userfiles/ directory...

CVE-2005-4814

Unrestricted file upload vulnerability in Segue CMS before 1.3.6, when the Apache HTTP Server handles .phtml files with the PHP interpreter, allows remote attackers to upload and execute arbitrary PHP code by placing .phtml files in the userfiles/ directory...

Segue CMS themesettings.inc.php themesdir Parameter Remote File Inclusion

The remote web server is running Segue CMS, an open source content management system tailored for educational institutions. The version of Segue CMS installed on the remote host fails to sanitize input to the 'themesdir' parameter before using it in the 'themes/program/themesettings.inc.php' scri...

CVE-2006-5497

PHP remote file inclusion vulnerability in themes/program/themesettings.inc.php in Segue CMS 1.5.8 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the themesdir parameter...

CVE-2006-5490

Multiple SQL injection vulnerabilities in Segue Content Management System CMS before 1.5.8 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2006-5498

Directory traversal vulnerability in themes/program/themesettings.inc.php in Segue CMS 1.5.8 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the theme parameter...

CVE-2006-5490

Multiple SQL injection vulnerabilities in Segue Content Management System CMS before 1.5.8 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2006-5497

CVE-2006-5497 affects Segue CMS, specifically the PHP remote file inclusion in themes/program/themesettings.inc.php. Exploitation relies on the themesdir parameter when register_globals is enabled, allowing an unauthenticated attacker to include remote PHP code and potentially execute arbitrary c...

CVE-2006-5498

CVE-2006-5498 concerns a directory traversal in Segue CMS prior to or at version 1.5.8, specifically in themes/program/themesettings.inc.php. The flaw lets remote attackers include and execute arbitrary local files by supplying a .. (dot dot) in the theme parameter. Impact is reflected as Partial...

CVE-2006-5490

CVE-2006-5490 affects the Segue Content Management System (CMS) prior to version 1.5.8 and involves multiple SQL injection vulnerabilities. The underlying issue allows remote attackers to execute arbitrary SQL commands via unspecified vectors, with impact described as partial confidentiality, int...

CVE-2006-5497: Undefined Security Weakness

PHP remote file inclusion vulnerability in themes/program/themesettings.inc.php in Segue CMS 1.5.8 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the themesdir parameter...

CVE-2006-5498: Undefined Security Weakness

Directory traversal vulnerability in themes/program/themesettings.inc.php in Segue CMS 1.5.8 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the theme parameter...

CVE-2006-5490: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Segue Content Management System CMS before 1.5.8 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

Segue CMS <= 1.5.8 (themesdir) Remote File Include Vulnerability

+------------------------------------------------------------------------------------------- + Segue CMS = 1.5.8 themesdir Remote File Include Vulnerability +------------------------------------------------------------------------------------------- + Affected Software .: Segue CMS = 1.5.8 + Vend...

Segue CMS 1.5.8 - themesdir Remote File Inclusion

Segue CMS 1.5.8 - themesdir Remote File Inclusion +------------------------------------------------------------------------------------------- + Segue CMS +------------------------------------------------------------------------------------------- + Details: + Segue CMS...

Segue CMS <= 1.5.8 (themesdir) Remote File Include Vulnerability

No description provided by source. +------------------------------------------------------------------------------------------- + Segue CMS = 1.5.8 themesdir Remote File Include Vulnerability +------------------------------------------------------------------------------------------- + Affected...

Segue CMS <= 1.5.8 (themesdir) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ================================================================ Segue CMS +------------------------------------------------------------------------------------------- + Details: + Segue CMS themes/program/themesettings.inc.php does not...

Segue CMS 1.5.8 - 'themesdir' Remote File Inclusion

+------------------------------------------------------------------------------------------- + Segue CMS +------------------------------------------------------------------------------------------- + Details: + Segue CMS themes/program/themesettings.inc.php does not intialize the $themesdir...