<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: easy-script</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2008-6165: SQL injection vulnerability in gestion.php in CSPartner 0.1, when magic_quotes_gpc is disabled, allows remote </title><link>https://patchthecve.com/cve/CVE-2008-6165.html</link><guid>https://patchthecve.com/cve/CVE-2008-6165.html</guid><pubDate>Tue, 16 Jun 2026 23:01:44 +0000</pubDate><description>MEDIUM 6.8: SQL injection vulnerability in gestion.php in CSPartner 0.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the (1) pseudo and (2) passe parameters.</description></item><item><title>CVE-2008-5323: Cross-site scripting (XSS) vulnerability in index.php in Wysi Wiki Wyg 1.0 allows remote attackers to inject a</title><link>https://patchthecve.com/cve/CVE-2008-5323.html</link><guid>https://patchthecve.com/cve/CVE-2008-5323.html</guid><pubDate>Tue, 16 Jun 2026 22:59:43 +0000</pubDate><description>MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in index.php in Wysi Wiki Wyg 1.0 allows remote attackers to inject arbitrary web script or HTML via the s parameter.</description></item><item><title>CVE-2008-5322: Wysi Wiki Wyg 1.0 allows remote attackers to obtain system information via an invalid categup parameter to ind</title><link>https://patchthecve.com/cve/CVE-2008-5322.html</link><guid>https://patchthecve.com/cve/CVE-2008-5322.html</guid><pubDate>Tue, 16 Jun 2026 22:59:43 +0000</pubDate><description>HIGH 7.8: Wysi Wiki Wyg 1.0 allows remote attackers to obtain system information via an invalid categup parameter to index.php, which calls the phpinfo function.</description></item><item><title>CVE-2008-5065: TlGuestBook 1.2 allows remote attackers to bypass authentication and gain administrative access by setting the</title><link>https://patchthecve.com/cve/CVE-2008-5065.html</link><guid>https://patchthecve.com/cve/CVE-2008-5065.html</guid><pubDate>Tue, 16 Jun 2026 22:59:11 +0000</pubDate><description>HIGH 7.5: TlGuestBook 1.2 allows remote attackers to bypass authentication and gain administrative access by setting the tlGuestBook_login cookie to admin.</description></item><item><title>CVE-2008-4783: tlAds 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the tlAds</title><link>https://patchthecve.com/cve/CVE-2008-4783.html</link><guid>https://patchthecve.com/cve/CVE-2008-4783.html</guid><pubDate>Tue, 16 Jun 2026 22:58:32 +0000</pubDate><description>HIGH 7.5: tlAds 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the tlAds_login cookie to &quot;admin.&quot;</description></item><item><title>CVE-2008-4781: Directory traversal vulnerability in update.php in MyKtools 2.4 allows remote attackers to include and execute</title><link>https://patchthecve.com/cve/CVE-2008-4781.html</link><guid>https://patchthecve.com/cve/CVE-2008-4781.html</guid><pubDate>Tue, 16 Jun 2026 22:58:31 +0000</pubDate><description>HIGH 7.5: Directory traversal vulnerability in update.php in MyKtools 2.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the langage parameter.</description></item><item><title>CVE-2008-4780: Directory traversal vulnerability in admin/centre.php in MyForum 1.3, when register_globals is enabled, allows</title><link>https://patchthecve.com/cve/CVE-2008-4780.html</link><guid>https://patchthecve.com/cve/CVE-2008-4780.html</guid><pubDate>Tue, 16 Jun 2026 22:58:31 +0000</pubDate><description>MEDIUM 6.8: Directory traversal vulnerability in admin/centre.php in MyForum 1.3, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the padmin parameter.</description></item></channel></rss>