<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: phpmyconferences</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2007-5811: Directory traversal vulnerability in PageTraiteDownload.php in phpMyConferences 8.0.2 and earlier allows remot</title><link>https://patchthecve.com/cve/CVE-2007-5811.html</link><guid>https://patchthecve.com/cve/CVE-2007-5811.html</guid><pubDate>Tue, 16 Jun 2026 22:46:52 +0000</pubDate><description>MEDIUM 5.0: Directory traversal vulnerability in PageTraiteDownload.php in phpMyConferences 8.0.2 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the dir parameter.  NOTE: this issue is disputed for 8.0.2 by a reliable third party, who notes that the PHP code is syntactically i</description></item><item><title>CVE-2006-5678: PHP remote file inclusion vulnerability in common/visiteurs/include/library.inc.php in J-Pierre DEZELUS Les Vi</title><link>https://patchthecve.com/cve/CVE-2006-5678.html</link><guid>https://patchthecve.com/cve/CVE-2006-5678.html</guid><pubDate>Tue, 16 Jun 2026 22:31:39 +0000</pubDate><description>CRITICAL 9.8: PHP remote file inclusion vulnerability in common/visiteurs/include/library.inc.php in J-Pierre DEZELUS Les Visiteurs 2.0.1, as used in phpMyConferences (phpMyConference) 8.0.2 and possibly other products, allows remote attackers to execute arbitrary PHP code via a URL in the lvc_modules_dir paramet</description></item><item><title>CVE-2006-5310: PHP remote file inclusion vulnerability in common/visiteurs/include/menus.inc.php in J-Pierre DEZELUS Les Visi</title><link>https://patchthecve.com/cve/CVE-2006-5310.html</link><guid>https://patchthecve.com/cve/CVE-2006-5310.html</guid><pubDate>Tue, 16 Jun 2026 22:30:56 +0000</pubDate><description>MEDIUM 6.8: PHP remote file inclusion vulnerability in common/visiteurs/include/menus.inc.php in J-Pierre DEZELUS Les Visiteurs 2.0.1, as used in phpMyConferences (phpMyConference) 8.0.2 and possibly other products, allows remote attackers to execute arbitrary PHP code via a URL in the lvc_include_dir parameter</description></item></channel></rss>