<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: community server</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2007-5969: MySQL Community Server 5.0.x before 5.0.51, Enterprise Server 5.0.x before 5.0.52, Server 5.1.x before 5.1.23,</title><link>https://patchthecve.com/cve/CVE-2007-5969.html</link><guid>https://patchthecve.com/cve/CVE-2007-5969.html</guid><pubDate>Tue, 16 Jun 2026 22:47:08 +0000</pubDate><description>HIGH 7.1: MySQL Community Server 5.0.x before 5.0.51, Enterprise Server 5.0.x before 5.0.52, Server 5.1.x before 5.1.23, and Server 6.0.x before 6.0.4, when a table relies on symlinks created through explicit DATA DIRECTORY and INDEX DIRECTORY options, allows remote authenticated users to overwrite system tab</description></item><item><title>CVE-2007-3782: MySQL Community Server before 5.0.45 allows remote authenticated users to gain update privileges for a table i</title><link>https://patchthecve.com/cve/CVE-2007-3782.html</link><guid>https://patchthecve.com/cve/CVE-2007-3782.html</guid><pubDate>Tue, 16 Jun 2026 22:42:43 +0000</pubDate><description>LOW 3.5: MySQL Community Server before 5.0.45 allows remote authenticated users to gain update privileges for a table in another database via a view that refers to this external table.</description></item><item><title>CVE-2007-3781: MySQL Community Server before 5.0.45 does not require privileges such as SELECT for the source table in a CREA</title><link>https://patchthecve.com/cve/CVE-2007-3781.html</link><guid>https://patchthecve.com/cve/CVE-2007-3781.html</guid><pubDate>Tue, 16 Jun 2026 22:42:43 +0000</pubDate><description>MEDIUM 4.0: MySQL Community Server before 5.0.45 does not require privileges such as SELECT for the source table in a CREATE TABLE LIKE statement, which allows remote authenticated users to obtain sensitive information such as the table structure.</description></item><item><title>CVE-2007-3780: MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service (daemon crash) via a</title><link>https://patchthecve.com/cve/CVE-2007-3780.html</link><guid>https://patchthecve.com/cve/CVE-2007-3780.html</guid><pubDate>Tue, 16 Jun 2026 22:42:43 +0000</pubDate><description>MEDIUM 5.0: MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service (daemon crash) via a malformed password packet in the connection protocol.</description></item><item><title>CVE-2007-0925: Cross-site scripting (XSS) vulnerability in search/SearchResults.aspx in Community Server allows remote attack</title><link>https://patchthecve.com/cve/CVE-2007-0925.html</link><guid>https://patchthecve.com/cve/CVE-2007-0925.html</guid><pubDate>Tue, 16 Jun 2026 22:36:34 +0000</pubDate><description>MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in search/SearchResults.aspx in Community Server allows remote attackers to inject arbitrary web script or HTML via the q parameter.</description></item><item><title>CVE-2006-0535: Multiple cross-site scripting (XSS) vulnerabilities in Community Server allow remote attackers to inject arbit</title><link>https://patchthecve.com/cve/CVE-2006-0535.html</link><guid>https://patchthecve.com/cve/CVE-2006-0535.html</guid><pubDate>Tue, 16 Jun 2026 22:20:47 +0000</pubDate><description>MEDIUM 4.3: Multiple cross-site scripting (XSS) vulnerabilities in Community Server allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors.  NOTE: this candidate does not contain any actionable or distinguishing information.  Perhaps it should not be included in CVE.  NOTE: the</description></item></channel></rss>