Middlebury College Segue Cms — known CVE vulnerabilities

Every CVE whose affected-product data names Middlebury College Segue Cms, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2005-4814 — CVSS 7.5 (high): Unrestricted file upload vulnerability in Segue CMS before 1.3.6, when the Apache HTTP Server handles .phtml files with the PHP…
• CVE-2006-5490 — CVSS 7.5 (high): Multiple SQL injection vulnerabilities in Segue Content Management System (CMS) before 1.5.8 allow remote attackers to execute arbitrary…
• CVE-2006-5497 — CVSS 7.5 (high): PHP remote file inclusion vulnerability in themes/program/themesettings.inc.php in Segue CMS 1.5.8 and earlier, when register_globals is…
• CVE-2006-5498 — CVSS 7.5 (high): Directory traversal vulnerability in themes/program/themesettings.inc.php in Segue CMS 1.5.8 and earlier allows remote attackers to include…
• CVE-2006-5722 — CVSS 5.1 (medium): Multiple PHP remote file inclusion vulnerabilities in Segue CMS 1.5.9 and earlier, when magic_quotes_gpc is enabled, allow remote attackers…