<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: directtopics</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2005-1569: Cross-site scripting (XSS) vulnerability in DirectTopics 2.1 and 2.2 allows remote attackers to inject arbitra</title><link>https://patchthecve.com/cve/CVE-2005-1569.html</link><guid>https://patchthecve.com/cve/CVE-2005-1569.html</guid><pubDate>Tue, 16 Jun 2026 22:13:17 +0000</pubDate><description>MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in DirectTopics 2.1 and 2.2 allows remote attackers to inject arbitrary web script via a javascript: URL in (1) a thread or (2) an IMG tag.</description></item><item><title>CVE-2005-1568: topic.php in DirectTopics 2.1 and 2.2 allows remote attackers to obtain sensitive information via an invalid t</title><link>https://patchthecve.com/cve/CVE-2005-1568.html</link><guid>https://patchthecve.com/cve/CVE-2005-1568.html</guid><pubDate>Tue, 16 Jun 2026 22:13:17 +0000</pubDate><description>MEDIUM 5.0: topic.php in DirectTopics 2.1 and 2.2 allows remote attackers to obtain sensitive information via an invalid topic parameter, which reveals the path in an error message.</description></item><item><title>CVE-2005-1567: SQL injection vulnerability in topic.php in DirectTopics 2.1 and 2.2 allows remote attackers to execute arbitr</title><link>https://patchthecve.com/cve/CVE-2005-1567.html</link><guid>https://patchthecve.com/cve/CVE-2005-1567.html</guid><pubDate>Tue, 16 Jun 2026 22:13:17 +0000</pubDate><description>HIGH 7.5: SQL injection vulnerability in topic.php in DirectTopics 2.1 and 2.2 allows remote attackers to execute arbitrary SQL commands via the topic parameter.</description></item></channel></rss>