CVE:CVE-2005-4814
CNNVD:CNNVD-200512-878
Segue CMS的1.3.6之前版本当Apache HTTP Server处理带有PHP解析器的.phtml文件时存在未限制文件上载漏洞，远程攻击者可以通过将.phtml文件放置于userfiles/录来上载并执行任意PHP代码。
solution:Upgrade middlebury_college segue_cms to a higher version than 1.3.5,and avoid the version (,1.3.5]