<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: webboard</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2011-5204: Akiva WebBoard 8.x stores passwords in plaintext, which allows local users to obtain sensitive information by </title><link>https://patchthecve.com/cve/CVE-2011-5204.html</link><guid>https://patchthecve.com/cve/CVE-2011-5204.html</guid><pubDate>Tue, 16 Jun 2026 23:36:08 +0000</pubDate><description>LOW 1.9: Akiva WebBoard 8.x stores passwords in plaintext, which allows local users to obtain sensitive information by reading from the database.</description></item><item><title>CVE-2011-5203: SQL injection vulnerability in WB/Default.asp in Akiva WebBoard before 8 SR 1 allows remote attackers to execu</title><link>https://patchthecve.com/cve/CVE-2011-5203.html</link><guid>https://patchthecve.com/cve/CVE-2011-5203.html</guid><pubDate>Tue, 16 Jun 2026 23:36:08 +0000</pubDate><description>HIGH 7.5: SQL injection vulnerability in WB/Default.asp in Akiva WebBoard before 8 SR 1 allows remote attackers to execute arbitrary SQL commands via the name parameter.  NOTE: some of these details are obtained from third party information.</description></item><item><title>CVE-2009-2600: Multiple directory traversal vulnerabilities in view.php in Webboard 2.90 beta and earlier allow remote attack</title><link>https://patchthecve.com/cve/CVE-2009-2600.html</link><guid>https://patchthecve.com/cve/CVE-2009-2600.html</guid><pubDate>Tue, 16 Jun 2026 23:09:47 +0000</pubDate><description>MEDIUM 5.0: Multiple directory traversal vulnerabilities in view.php in Webboard 2.90 beta and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in the topic parameter.</description></item><item><title>CVE-2008-5956: Wbstreet (aka PHPSTREET Webboard) 1.0 stores sensitive information under the web root with insufficient access</title><link>https://patchthecve.com/cve/CVE-2008-5956.html</link><guid>https://patchthecve.com/cve/CVE-2008-5956.html</guid><pubDate>Tue, 16 Jun 2026 23:01:18 +0000</pubDate><description>MEDIUM 5.0: Wbstreet (aka PHPSTREET Webboard) 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database credentials via a direct request to connect.inc.</description></item><item><title>CVE-2008-5955: SQL injection vulnerability in show.php in Wbstreet (aka PHPSTREET Webboard) 1.0 allows remote attackers to ex</title><link>https://patchthecve.com/cve/CVE-2008-5955.html</link><guid>https://patchthecve.com/cve/CVE-2008-5955.html</guid><pubDate>Tue, 16 Jun 2026 23:01:18 +0000</pubDate><description>HIGH 7.5: SQL injection vulnerability in show.php in Wbstreet (aka PHPSTREET Webboard) 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.</description></item></channel></rss>