CVE:CVE-2006-5498
CNNVD:CNNVD-200610-412
Segue CMS 1.5.8及更早版本中的themes/program/themesettings.inc.php存在目录遍历漏洞，远程攻击者可以通过theme参数的..(点点)包含和执行任意本地文件。
solution:Upgrade middlebury_college segue_cms to a higher version than 1.5.8,and avoid the version (,1.5.8]