EUVD-2006-5483

Malware in sbrugna...

CVE-2006-5497: Undefined Security Weakness

PHP remote file inclusion vulnerability in themes/program/themesettings.inc.php in Segue CMS 1.5.8 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the themesdir parameter...

CVE-2006-5498: Undefined Security Weakness

Directory traversal vulnerability in themes/program/themesettings.inc.php in Segue CMS 1.5.8 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the theme parameter...

Segue CMS 1.5.8 - themesdir Remote File Inclusion

Segue CMS 1.5.8 - themesdir Remote File Inclusion +------------------------------------------------------------------------------------------- + Segue CMS +------------------------------------------------------------------------------------------- + Details: + Segue CMS...