<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: aspsitem</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2006-2794: Hesabim.asp in ASPSitem 2.0 and earlier allows remote attackers to read private messages of other users via a </title><link>https://patchthecve.com/cve/CVE-2006-2794.html</link><guid>https://patchthecve.com/cve/CVE-2006-2794.html</guid><pubDate>Tue, 16 Jun 2026 22:25:47 +0000</pubDate><description>HIGH 7.8: Hesabim.asp in ASPSitem 2.0 and earlier allows remote attackers to read private messages of other users via a modified id parameter.</description></item><item><title>CVE-2006-2793: SQL injection vulnerability in Anket.asp in ASPSitem 2.0 and earlier allows remote attackers to execute arbitr</title><link>https://patchthecve.com/cve/CVE-2006-2793.html</link><guid>https://patchthecve.com/cve/CVE-2006-2793.html</guid><pubDate>Tue, 16 Jun 2026 22:25:47 +0000</pubDate><description>HIGH 7.5: SQL injection vulnerability in Anket.asp in ASPSitem 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the hid parameter.</description></item><item><title>CVE-2006-1964: SQL injection vulnerability in Haberler.asp in ASPSitem 1.83 and earlier allows remote attackers to execute ar</title><link>https://patchthecve.com/cve/CVE-2006-1964.html</link><guid>https://patchthecve.com/cve/CVE-2006-1964.html</guid><pubDate>Tue, 16 Jun 2026 22:24:02 +0000</pubDate><description>HIGH 7.5: SQL injection vulnerability in Haberler.asp in ASPSitem 1.83 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.</description></item></channel></rss>