Unrestricted file upload vulnerability in Segue CMS before 1.3.6, when the Apache HTTP Server handles .phtml files with the PHP interpreter, allows remote attackers to upload and execute arbitrary PHP code by placing .phtml files in the userfiles/ directory.
References
Configurations
History
No history.
Information
Published : 2005-12-31 05:00
Updated : 2024-02-28 10:42
NVD link : CVE-2005-4814
Mitre link : CVE-2005-4814
CVE.ORG link : CVE-2005-4814
JSON object : View
Products Affected
middlebury_college
- segue_cms
CWE