Unscored CVE-2006-5498 EUVD-2006-5483GHSA-966c-h9h3-gqm8

Directory traversal vulnerability in themes/program/themesettings.inc.php in Segue CMS 1.5.8 and earlier allows remote attackers to include…

Published Oct 25, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in themes/program/themesettings.inc.php in Segue CMS 1.5.8 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the theme parameter.

References

ADV-2006-4122 vdb-entry
seguecms-themesettings-file-include(29692) vdb-entry
http://sourceforge.net/forum/forum.php?forum_id=625467