<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: phpmyagenda</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2006-5263: Directory traversal vulnerability in templates/header.php3 in phpMyAgenda 3.1 and earlier allows remote attack</title><link>https://patchthecve.com/cve/CVE-2006-5263.html</link><guid>https://patchthecve.com/cve/CVE-2006-5263.html</guid><pubDate>Tue, 16 Jun 2026 22:30:51 +0000</pubDate><description>HIGH 7.5: Directory traversal vulnerability in templates/header.php3 in phpMyAgenda 3.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter, as demonstrated by a parameter value naming an Apache HTTP Server log file that apparently cont</description></item><item><title>CVE-2006-5132: Multiple PHP remote file inclusion vulnerabilities in phpMyAgenda 3.0 Final and earlier allow remote attackers</title><link>https://patchthecve.com/cve/CVE-2006-5132.html</link><guid>https://patchthecve.com/cve/CVE-2006-5132.html</guid><pubDate>Tue, 16 Jun 2026 22:30:33 +0000</pubDate><description>HIGH 7.5: Multiple PHP remote file inclusion vulnerabilities in phpMyAgenda 3.0 Final and earlier allow remote attackers to execute arbitrary PHP code via a URL in the rootagenda parameter to (1) agendaplace.php3, (2) agendaplace2.php3, (3) infoevent.php3, and (4) agenda2.php3, different vectors than CVE-2006</description></item><item><title>CVE-2006-2009: PHP remote file inclusion vulnerability in agenda.php3 in phpMyAgenda 3.0 Final and earlier allows remote atta</title><link>https://patchthecve.com/cve/CVE-2006-2009.html</link><guid>https://patchthecve.com/cve/CVE-2006-2009.html</guid><pubDate>Tue, 16 Jun 2026 22:24:07 +0000</pubDate><description>HIGH 7.5: PHP remote file inclusion vulnerability in agenda.php3 in phpMyAgenda 3.0 Final and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rootagenda parameter.</description></item></channel></rss>