<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: myguestbook</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2005-2162: PHP remote file inclusion vulnerability in form.inc.php3 in MyGuestbook 0.6.1 allows remote attackers to execu</title><link>https://patchthecve.com/cve/CVE-2005-2162.html</link><guid>https://patchthecve.com/cve/CVE-2005-2162.html</guid><pubDate>Tue, 16 Jun 2026 22:14:23 +0000</pubDate><description>MEDIUM 5.0: PHP remote file inclusion vulnerability in form.inc.php3 in MyGuestbook 0.6.1 allows remote attackers to execute arbitrary PHP code via the lang parameter.</description></item><item><title>CVE-2003-1241: Cross-site scripting vulnerability (XSS) in (1) admin_index.php, (2) admin_pass.php, (3) admin_modif.php, and </title><link>https://patchthecve.com/cve/CVE-2003-1241.html</link><guid>https://patchthecve.com/cve/CVE-2003-1241.html</guid><pubDate>Tue, 16 Jun 2026 22:03:46 +0000</pubDate><description>MEDIUM 4.3: Cross-site scripting vulnerability (XSS) in (1) admin_index.php, (2) admin_pass.php, (3) admin_modif.php, and (4) admin_suppr.php in MyGuestbook 3.0 allows remote attackers to execute arbitrary PHP code by modifying the location parameter to reference a URL on a remote web server that contains file.</description></item><item><title>CVE-2002-0732: Cross-site scripting vulnerability in MyGuestbook 1.0 allows remote attackers to execute arbitrary script or i</title><link>https://patchthecve.com/cve/CVE-2002-0732.html</link><guid>https://patchthecve.com/cve/CVE-2002-0732.html</guid><pubDate>Tue, 16 Jun 2026 21:58:01 +0000</pubDate><description>HIGH 7.5: Cross-site scripting vulnerability in MyGuestbook 1.0 allows remote attackers to execute arbitrary script or inject HTML via fields such as (1) user name or (2) comments.</description></item></channel></rss>