<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: cms.maury91</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2008-6952: SQL injection vulnerability in Rss.php in MauryCMS 0.53.2 and earlier allows remote attackers to execute arbit</title><link>https://patchthecve.com/cve/CVE-2008-6952.html</link><guid>https://patchthecve.com/cve/CVE-2008-6952.html</guid><pubDate>Tue, 16 Jun 2026 23:03:18 +0000</pubDate><description>HIGH 7.5: SQL injection vulnerability in Rss.php in MauryCMS 0.53.2 and earlier allows remote attackers to execute arbitrary SQL commands via the c parameter.</description></item><item><title>CVE-2008-6951: MauryCMS 0.53.2 and earlier does not require administrative authentication for Editors/fckeditor/editor/filema</title><link>https://patchthecve.com/cve/CVE-2008-6951.html</link><guid>https://patchthecve.com/cve/CVE-2008-6951.html</guid><pubDate>Tue, 16 Jun 2026 23:03:17 +0000</pubDate><description>HIGH 7.5: MauryCMS 0.53.2 and earlier does not require administrative authentication for Editors/fckeditor/editor/filemanager/browser/default/browser.html, which allows remote attackers to upload arbitrary files via a direct request.</description></item><item><title>CVE-2008-6345: SQL injection vulnerability in Forum.php in SolarCMS 0.53.8 and 1.0 allows remote attackers to execute arbitra</title><link>https://patchthecve.com/cve/CVE-2008-6345.html</link><guid>https://patchthecve.com/cve/CVE-2008-6345.html</guid><pubDate>Tue, 16 Jun 2026 23:02:03 +0000</pubDate><description>HIGH 7.5: SQL injection vulnerability in Forum.php in SolarCMS 0.53.8 and 1.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter to indes.php.  NOTE: some of these details are obtained from third party information.</description></item></channel></rss>