<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: chaossoft</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2006-4119: SQL injection vulnerability in gc.php in GeheimChaos 0.5 and earlier allows remote attackers to execute arbitr</title><link>https://patchthecve.com/cve/CVE-2006-4119.html</link><guid>https://patchthecve.com/cve/CVE-2006-4119.html</guid><pubDate>Tue, 16 Jun 2026 22:28:27 +0000</pubDate><description>MEDIUM 5.1: SQL injection vulnerability in gc.php in GeheimChaos 0.5 and earlier allows remote attackers to execute arbitrary SQL commands via the Temp_entered_password parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.</description></item><item><title>CVE-2006-4118: Multiple SQL injection vulnerabilities in GeheimChaos 0.5 and earlier allow remote attackers to execute arbitr</title><link>https://patchthecve.com/cve/CVE-2006-4118.html</link><guid>https://patchthecve.com/cve/CVE-2006-4118.html</guid><pubDate>Tue, 16 Jun 2026 22:28:27 +0000</pubDate><description>MEDIUM 5.1: Multiple SQL injection vulnerabilities in GeheimChaos 0.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) Temp_entered_login or (2) Temp_entered_email parameters to (a) gc.php, and in multiple parameters in (b) include/registrieren.php, possibly involving the (3) $fo</description></item><item><title>CVE-2006-4039: Multiple SQL injection vulnerabilities in eintragen.php in GaesteChaos 0.2 and earlier allow remote attackers </title><link>https://patchthecve.com/cve/CVE-2006-4039.html</link><guid>https://patchthecve.com/cve/CVE-2006-4039.html</guid><pubDate>Tue, 16 Jun 2026 22:28:18 +0000</pubDate><description>HIGH 7.5: Multiple SQL injection vulnerabilities in eintragen.php in GaesteChaos 0.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) gastname, (2) gastwohnort, or (3) gasteintrag parameters.</description></item><item><title>CVE-2006-4038: Multiple cross-site scripting (XSS) vulnerabilities in eintragen.php in GaesteChaos 0.2 and earlier allow remo</title><link>https://patchthecve.com/cve/CVE-2006-4038.html</link><guid>https://patchthecve.com/cve/CVE-2006-4038.html</guid><pubDate>Tue, 16 Jun 2026 22:28:18 +0000</pubDate><description>MEDIUM 4.3: Multiple cross-site scripting (XSS) vulnerabilities in eintragen.php in GaesteChaos 0.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) gastname or (2) gastwohnort parameters.</description></item></channel></rss>