<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: codetoad</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2008-6891: Multiple cross-site scripting (XSS) vulnerabilities in ASP Forum Script allow remote attackers to inject arbit</title><link>https://patchthecve.com/cve/CVE-2008-6891.html</link><guid>https://patchthecve.com/cve/CVE-2008-6891.html</guid><pubDate>Tue, 16 Jun 2026 23:03:10 +0000</pubDate><description>MEDIUM 4.3: Multiple cross-site scripting (XSS) vulnerabilities in ASP Forum Script allow remote attackers to inject arbitrary web script or HTML via the (1) forum_id parameter to (a) new_message.asp and (b) messages.asp, and the (2) query string to default.asp.</description></item><item><title>CVE-2008-6890: SQL injection vulnerability in messages.asp in ASP Forum Script allows remote attackers to execute arbitrary S</title><link>https://patchthecve.com/cve/CVE-2008-6890.html</link><guid>https://patchthecve.com/cve/CVE-2008-6890.html</guid><pubDate>Tue, 16 Jun 2026 23:03:10 +0000</pubDate><description>HIGH 7.5: SQL injection vulnerability in messages.asp in ASP Forum Script allows remote attackers to execute arbitrary SQL commands via the message_id parameter.</description></item><item><title>CVE-2008-6500: Cross-site scripting (XSS) vulnerability in CodeToad ASP Shopping Cart Script allows remote attackers to injec</title><link>https://patchthecve.com/cve/CVE-2008-6500.html</link><guid>https://patchthecve.com/cve/CVE-2008-6500.html</guid><pubDate>Tue, 16 Jun 2026 23:02:20 +0000</pubDate><description>MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in CodeToad ASP Shopping Cart Script allows remote attackers to inject arbitrary web script or HTML via the query string to the default URI.</description></item></channel></rss>