<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: portailphp</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2007-1641: SQL injection vulnerability in index.php in PortailPHP 2.0 allows remote attackers to execute arbitrary SQL co</title><link>https://patchthecve.com/cve/CVE-2007-1641.html</link><guid>https://patchthecve.com/cve/CVE-2007-1641.html</guid><pubDate>Tue, 16 Jun 2026 22:38:00 +0000</pubDate><description>HIGH 7.5: SQL injection vulnerability in index.php in PortailPHP 2.0 allows remote attackers to execute arbitrary SQL commands via the idnews parameter.</description></item><item><title>CVE-2006-3922: PHP remote file inclusion vulnerability in mod_membre/inscription.php in PortailPHP 1.7 allows remote attacker</title><link>https://patchthecve.com/cve/CVE-2006-3922.html</link><guid>https://patchthecve.com/cve/CVE-2006-3922.html</guid><pubDate>Tue, 16 Jun 2026 22:28:05 +0000</pubDate><description>HIGH 7.5: PHP remote file inclusion vulnerability in mod_membre/inscription.php in PortailPHP 1.7 allows remote attackers to execute arbitrary PHP code via a URL in the chemin parameter.</description></item><item><title>CVE-2005-2486: SQL injection vulnerability in mod_forum/read_message.php in PortailPHP allows remote attackers to execute arb</title><link>https://patchthecve.com/cve/CVE-2005-2486.html</link><guid>https://patchthecve.com/cve/CVE-2005-2486.html</guid><pubDate>Tue, 16 Jun 2026 22:14:59 +0000</pubDate><description>HIGH 7.5: SQL injection vulnerability in mod_forum/read_message.php in PortailPHP allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php with the affiche parameter set to &quot;Forum-read_mess&quot;, a different vulnerability than CVE-2005-1701.</description></item><item><title>CVE-2005-1701: SQL injection vulnerability in PortailPHP 1.3 allows remote attackers to execute arbitrary SQL commands via th</title><link>https://patchthecve.com/cve/CVE-2005-1701.html</link><guid>https://patchthecve.com/cve/CVE-2005-1701.html</guid><pubDate>Tue, 16 Jun 2026 22:13:31 +0000</pubDate><description>HIGH 7.5: SQL injection vulnerability in PortailPHP 1.3 allows remote attackers to execute arbitrary SQL commands via the id parameter to the (1) News, (2) File, (3) Liens, or (4) Faq modules.</description></item></channel></rss>