<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: cwm-design</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2006-6766: Multiple SQL injection vulnerabilities in cwmExplorer 1.1.0 and earlier allow remote attackers to execute arbi</title><link>https://patchthecve.com/cve/CVE-2006-6766.html</link><guid>https://patchthecve.com/cve/CVE-2006-6766.html</guid><pubDate>Tue, 16 Jun 2026 22:33:45 +0000</pubDate><description>HIGH 7.5: Multiple SQL injection vulnerabilities in cwmExplorer 1.1.0 and earlier allow remote attackers to execute arbitrary SQL commands via unspecified vectors.  NOTE: The provenance of this information is unknown; details are obtained solely from third party information.</description></item><item><title>CVE-2006-6757: Directory traversal vulnerability in index.php in cwmExplorer 1.0 allows remote attackers to read arbitrary fi</title><link>https://patchthecve.com/cve/CVE-2006-6757.html</link><guid>https://patchthecve.com/cve/CVE-2006-6757.html</guid><pubDate>Tue, 16 Jun 2026 22:33:44 +0000</pubDate><description>HIGH 7.8: Directory traversal vulnerability in index.php in cwmExplorer 1.0 allows remote attackers to read arbitrary files and source code, and obtain sensitive information via directory traversal sequences in the show_file parameter.</description></item><item><title>CVE-2006-6738: PHP remote file inclusion vulnerability in statistic.php in cwmCounter 5.1.1 and earlier allows remote attacke</title><link>https://patchthecve.com/cve/CVE-2006-6738.html</link><guid>https://patchthecve.com/cve/CVE-2006-6738.html</guid><pubDate>Tue, 16 Jun 2026 22:33:42 +0000</pubDate><description>MEDIUM 6.8: PHP remote file inclusion vulnerability in statistic.php in cwmCounter 5.1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path parameter.</description></item><item><title>CVE-2006-6732: PHP remote file inclusion vulnerability in archive.php in cwmVote 1.0 allows remote attackers to execute arbit</title><link>https://patchthecve.com/cve/CVE-2006-6732.html</link><guid>https://patchthecve.com/cve/CVE-2006-6732.html</guid><pubDate>Tue, 16 Jun 2026 22:33:41 +0000</pubDate><description>MEDIUM 6.8: PHP remote file inclusion vulnerability in archive.php in cwmVote 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the abs parameter.</description></item></channel></rss>