<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: fersch</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2007-0138: formbankcgi.exe in Fersch Formbankserver 1.9, when the PATH_INFO begins with (1) AbfrageForm or (2) EingabeFor</title><link>https://patchthecve.com/cve/CVE-2007-0138.html</link><guid>https://patchthecve.com/cve/CVE-2007-0138.html</guid><pubDate>Tue, 16 Jun 2026 22:34:59 +0000</pubDate><description>MEDIUM 5.0: formbankcgi.exe in Fersch Formbankserver 1.9, when the PATH_INFO begins with (1) AbfrageForm or (2) EingabeForm, allows remote attackers to cause a denial of service (daemon crash) via multiple requests containing many /../ sequences in the Name parameter.  NOTE: The provenance of this information i</description></item><item><title>CVE-2007-0055: Directory traversal vulnerability in formbankcgi.exe/AbfrageForm in Formbankserver 1.9 allows remote attackers</title><link>https://patchthecve.com/cve/CVE-2007-0055.html</link><guid>https://patchthecve.com/cve/CVE-2007-0055.html</guid><pubDate>Tue, 16 Jun 2026 22:34:47 +0000</pubDate><description>MEDIUM 5.0: Directory traversal vulnerability in formbankcgi.exe/AbfrageForm in Formbankserver 1.9 allows remote attackers to read arbitrary files via directory traversal sequences in the Name parameter.  NOTE: The provenance of this information is unknown; the details are obtained solely from third party infor</description></item><item><title>CVE-2006-6910: formbankcgi.exe in Fersch Formbankserver 1.9, when the PATH_INFO begins with Abfrage, allows remote attackers </title><link>https://patchthecve.com/cve/CVE-2006-6910.html</link><guid>https://patchthecve.com/cve/CVE-2006-6910.html</guid><pubDate>Tue, 16 Jun 2026 22:34:01 +0000</pubDate><description>HIGH 7.8: formbankcgi.exe in Fersch Formbankserver 1.9, when the PATH_INFO begins with Abfrage, allows remote attackers to cause a denial of service (daemon crash) via multiple requests containing many /../ sequences in the Name parameter.</description></item></channel></rss>