<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: links manager</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2006-6148: Multiple cross-site scripting (XSS) vulnerabilities in submitlink.asp in JiRos Links Manager allow remote atta</title><link>https://patchthecve.com/cve/CVE-2006-6148.html</link><guid>https://patchthecve.com/cve/CVE-2006-6148.html</guid><pubDate>Tue, 16 Jun 2026 22:32:33 +0000</pubDate><description>MEDIUM 6.8: Multiple cross-site scripting (XSS) vulnerabilities in submitlink.asp in JiRos Links Manager allow remote attackers to inject arbitrary web script or HTML via the (1) lName, (2) lURL, (3) lImage, and (4) lDescription parameters.  NOTE: some of these details are obtained from third party information.</description></item><item><title>CVE-2006-6147: Multiple SQL injection vulnerabilities in JiRos Links Manager allow remote attackers to execute arbitrary SQL </title><link>https://patchthecve.com/cve/CVE-2006-6147.html</link><guid>https://patchthecve.com/cve/CVE-2006-6147.html</guid><pubDate>Tue, 16 Jun 2026 22:32:33 +0000</pubDate><description>HIGH 7.5: Multiple SQL injection vulnerabilities in JiRos Links Manager allow remote attackers to execute arbitrary SQL commands via the (1) LinkID parameter to openlink.asp or the (2) CategoryID parameter to viewlinks.asp.</description></item><item><title>CVE-2006-4328: SQL injection vulnerability in admin.php in CloudNine Interactive Links Manager 2006-06-12, when magic_quotes_</title><link>https://patchthecve.com/cve/CVE-2006-4328.html</link><guid>https://patchthecve.com/cve/CVE-2006-4328.html</guid><pubDate>Tue, 16 Jun 2026 22:28:51 +0000</pubDate><description>MEDIUM 5.1: SQL injection vulnerability in admin.php in CloudNine Interactive Links Manager 2006-06-12, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the nick parameter.</description></item><item><title>CVE-2006-4327: Multiple cross-site scripting (XSS) vulnerabilities in add_url.php in CloudNine Interactive Links Manager 2006</title><link>https://patchthecve.com/cve/CVE-2006-4327.html</link><guid>https://patchthecve.com/cve/CVE-2006-4327.html</guid><pubDate>Tue, 16 Jun 2026 22:28:51 +0000</pubDate><description>MEDIUM 6.8: Multiple cross-site scripting (XSS) vulnerabilities in add_url.php in CloudNine Interactive Links Manager 2006-06-12 allow remote attackers to inject arbitrary web script or HTML via the (1) title, (2) description, or (3) keywords parameters.</description></item></channel></rss>