<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: zina</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2008-2495: Directory traversal vulnerability in index.php in Zina 1.0 RC3 allows remote attackers to have an unknown impa</title><link>https://patchthecve.com/cve/CVE-2008-2495.html</link><guid>https://patchthecve.com/cve/CVE-2008-2495.html</guid><pubDate>Tue, 16 Jun 2026 22:53:52 +0000</pubDate><description>HIGH 7.5: Directory traversal vulnerability in index.php in Zina 1.0 RC3 allows remote attackers to have an unknown impact via a .. (dot dot) in the p parameter.</description></item><item><title>CVE-2008-2494: Cross-site scripting (XSS) vulnerability in index.php in Zina 1.0 RC3 allows remote attackers to inject arbitr</title><link>https://patchthecve.com/cve/CVE-2008-2494.html</link><guid>https://patchthecve.com/cve/CVE-2008-2494.html</guid><pubDate>Tue, 16 Jun 2026 22:53:52 +0000</pubDate><description>MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in index.php in Zina 1.0 RC3 allows remote attackers to inject arbitrary web script or HTML via the l parameter.</description></item><item><title>CVE-2007-0303: Multiple unspecified vulnerabilities in Zina 1.0rc1 and earlier have unknown impact and attack vectors related</title><link>https://patchthecve.com/cve/CVE-2007-0303.html</link><guid>https://patchthecve.com/cve/CVE-2007-0303.html</guid><pubDate>Tue, 16 Jun 2026 22:35:19 +0000</pubDate><description>HIGH 10.0: Multiple unspecified vulnerabilities in Zina 1.0rc1 and earlier have unknown impact and attack vectors related to &quot;Potential security bugs.&quot;</description></item><item><title>CVE-2005-4631: SQL injection vulnerability in index.php in Zina 0.12.07 and earlier allows remote attackers to execute arbitr</title><link>https://patchthecve.com/cve/CVE-2005-4631.html</link><guid>https://patchthecve.com/cve/CVE-2005-4631.html</guid><pubDate>Tue, 16 Jun 2026 22:19:08 +0000</pubDate><description>HIGH 7.5: SQL injection vulnerability in index.php in Zina 0.12.07 and earlier allows remote attackers to execute arbitrary SQL commands via the p parameter.</description></item></channel></rss>