<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: gastebuch</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2009-5093: Directory traversal vulnerability in gastbuch.php in Gästebuch (Gastebuch) 1.6 allows remote attackers to read</title><link>https://patchthecve.com/cve/CVE-2009-5093.html</link><guid>https://patchthecve.com/cve/CVE-2009-5093.html</guid><pubDate>Tue, 16 Jun 2026 23:15:00 +0000</pubDate><description>MEDIUM 5.0: Directory traversal vulnerability in gastbuch.php in Gästebuch (Gastebuch) 1.6 allows remote attackers to read arbitrary files via a .. (dot dot) in the start parameter.</description></item><item><title>CVE-2007-1130: PHP remote file inclusion vulnerability in sinagb.php in Sinapis Gastebuch 2.2 allows remote attackers to exec</title><link>https://patchthecve.com/cve/CVE-2007-1130.html</link><guid>https://patchthecve.com/cve/CVE-2007-1130.html</guid><pubDate>Tue, 16 Jun 2026 22:37:00 +0000</pubDate><description>HIGH 7.5: PHP remote file inclusion vulnerability in sinagb.php in Sinapis Gastebuch 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the fuss parameter.</description></item><item><title>CVE-2006-0706: Cross-site scripting vulnerability in eintrag.php in Gästebuch (Gastebuch) before 1.3.3 allows remote attacker</title><link>https://patchthecve.com/cve/CVE-2006-0706.html</link><guid>https://patchthecve.com/cve/CVE-2006-0706.html</guid><pubDate>Tue, 16 Jun 2026 22:21:07 +0000</pubDate><description>MEDIUM 4.3: Cross-site scripting vulnerability in eintrag.php in Gästebuch (Gastebuch) before 1.3.3 allows remote attackers to inject arbitrary web script or HTML via the URL, which is used in the homepage parameter.</description></item></channel></rss>