PT-2006-6205 · Segue · Segue Cms

Published 2006-10-25 · Updated 2017-07-20 · CVE-2006-5490

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Segue Content Management System (CMS) versions prior to 1.5.8

Description The issue allows remote attackers to execute arbitrary SQL commands, potentially leading to unauthorized data access or modification. The exact vectors used for the attack are not specified.

Recommendations For versions prior to 1.5.8, update to version 1.5.8 or later to resolve the issue.

Fix

Related Identifiers

CVE-2006-5490

Affected Products

Segue Cms

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2006-5490 · Security Note
• http://securityfocus.com/bid/20645 · Patch
• http://secunia.com/advisories/22514 · Vendor Advisory
• http://osvdb.org/29903 · Note
• http://sourceforge.net/project/shownotes.php?group_id=82171&release_id=456920 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29691 · Note
• http://vupen.com/english/advisories/2006/4123 · Note