CVE-2012-1254

CVE-2012-1254 affects the Segue content management system (Segue 2.2.10.2 and earlier). The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The public materials consistently describe an ability to exec...

CVE-2012-1255

Summary: CVE-2012-1255 affects Segue up to version 2.2.10.2, due to a SQL injection flaw. An unauthenticated, remote attacker could exploit this vulnerability to bypass authentication and log in as an administrator. The impact is the ability to take full admin control of Segue. Affected component...