Vulnerability Description
Unrestricted file upload vulnerability in Segue CMS before 1.3.6, when the Apache HTTP Server handles .phtml files with the PHP interpreter, allows remote attackers to upload and execute arbitrary PHP code by placing .phtml files in the userfiles/ directory.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Middlebury College | Segue Cms | <= 1.3.5 |
References
- http://sourceforge.net/project/shownotes.php?release_id=456920&group_id=82171
- http://www.osvdb.org/29902
- http://sourceforge.net/project/shownotes.php?release_id=456920&group_id=82171
- http://www.osvdb.org/29902
FAQ
What is CVE-2005-4814?
CVE-2005-4814 is a vulnerability with a CVSS score of 7.5 (HIGH). Unrestricted file upload vulnerability in Segue CMS before 1.3.6, when the Apache HTTP Server handles .phtml files with the PHP interpreter, allows remote attackers to upload and execute arbitrary PHP...
How severe is CVE-2005-4814?
CVE-2005-4814 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2005-4814?
Check the references section above for vendor advisories and patch information. Affected products include: Middlebury College Segue Cms.