<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: allmyguests project</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2007-0172: Multiple PHP remote file inclusion vulnerabilities in AllMyGuests 0.3.0 and earlier allow remote attackers to </title><link>https://patchthecve.com/cve/CVE-2007-0172.html</link><guid>https://patchthecve.com/cve/CVE-2007-0172.html</guid><pubDate>Tue, 16 Jun 2026 22:35:03 +0000</pubDate><description>HIGH 7.5: Multiple PHP remote file inclusion vulnerabilities in AllMyGuests 0.3.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the AMG_serverpath parameter to (1) comments.php and (2) signin.php; and possibly via a URL in unspecified parameters to (3) include/submit.inc.php, (</description></item><item><title>CVE-2006-4993: Multiple PHP remote file inclusion vulnerabilities in AllMyGuests 0.4.1 and earlier allow remote attackers to </title><link>https://patchthecve.com/cve/CVE-2006-4993.html</link><guid>https://patchthecve.com/cve/CVE-2006-4993.html</guid><pubDate>Tue, 16 Jun 2026 22:30:16 +0000</pubDate><description>HIGH 7.5: Multiple PHP remote file inclusion vulnerabilities in AllMyGuests 0.4.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the _AMGconfig[cfg_serverpath] parameter in (1) modules/AllMyGuests/signin.php (aka the Nuke module) and (2) AllMyGuests/signin.php (aka the standalon</description></item><item><title>CVE-2004-0285: PHP remote file inclusion vulnerabilities in include/footer.inc.php in (1) AllMyVisitors, (2) AllMyLinks, and </title><link>https://patchthecve.com/cve/CVE-2004-0285.html</link><guid>https://patchthecve.com/cve/CVE-2004-0285.html</guid><pubDate>Tue, 16 Jun 2026 22:05:19 +0000</pubDate><description>CRITICAL 9.8: PHP remote file inclusion vulnerabilities in include/footer.inc.php in (1) AllMyVisitors, (2) AllMyLinks, and (3) AllMyGuests allow remote attackers to execute arbitrary PHP code via a URL in the _AMVconfig[cfg_serverpath] parameter.</description></item></channel></rss>