CVE-2005-4814: Middlebury College Segue CMS

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

Unrestricted file upload vulnerability in Segue CMS before 1.3.6, when the Apache HTTP Server handles .phtml files with the PHP interpreter, allows remote attackers to upload and execute arbitrary PHP code by placing .phtml files in the userfiles/ directory.

Affected products

• Middlebury College Segue CMS: up to and including 1.3.5

Published 2005-12-31. Last modified 2026-06-16.