<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: flexbb</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2008-0157: SQL injection vulnerability in FlexBB 0.6.3 and earlier allows remote attackers to execute arbitrary SQL comma</title><link>https://patchthecve.com/cve/CVE-2008-0157.html</link><guid>https://patchthecve.com/cve/CVE-2008-0157.html</guid><pubDate>Tue, 16 Jun 2026 22:49:03 +0000</pubDate><description>HIGH 7.5: SQL injection vulnerability in FlexBB 0.6.3 and earlier allows remote attackers to execute arbitrary SQL commands via the flexbb_temp_id parameter in a cookie.</description></item><item><title>CVE-2006-2034: SQL injection vulnerability in function/showprofile.php in FlexBB 0.5.5 allows remote attackers to execute arb</title><link>https://patchthecve.com/cve/CVE-2006-2034.html</link><guid>https://patchthecve.com/cve/CVE-2006-2034.html</guid><pubDate>Tue, 16 Jun 2026 22:24:12 +0000</pubDate><description>HIGH 7.5: SQL injection vulnerability in function/showprofile.php in FlexBB 0.5.5 allows remote attackers to execute arbitrary SQL commands, and view all usernames and passwords, via the id parameter to the showprofile page in index.php.</description></item><item><title>CVE-2006-1978: SQL injection vulnerability in inc/start.php in FlexBB 0.5.5 and earlier allows remote attackers to execute ar</title><link>https://patchthecve.com/cve/CVE-2006-1978.html</link><guid>https://patchthecve.com/cve/CVE-2006-1978.html</guid><pubDate>Tue, 16 Jun 2026 22:24:03 +0000</pubDate><description>HIGH 7.5: SQL injection vulnerability in inc/start.php in FlexBB 0.5.5 and earlier allows remote attackers to execute arbitrary SQL commands via the flexbb_username COOKIE parameter.</description></item><item><title>CVE-2006-1977: Cross-site scripting (XSS) vulnerability in FlexBB 0.5.7 BETA and earlier allows remote attackers to inject ar</title><link>https://patchthecve.com/cve/CVE-2006-1977.html</link><guid>https://patchthecve.com/cve/CVE-2006-1977.html</guid><pubDate>Tue, 16 Jun 2026 22:24:03 +0000</pubDate><description>MEDIUM 5.8: Cross-site scripting (XSS) vulnerability in FlexBB 0.5.7 BETA and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) name and (2) message parameters.</description></item><item><title>CVE-2006-1811: Multiple SQL injection vulnerabilities in FlexBB 0.5.5 BETA allow remote attackers to execute arbitrary SQL co</title><link>https://patchthecve.com/cve/CVE-2006-1811.html</link><guid>https://patchthecve.com/cve/CVE-2006-1811.html</guid><pubDate>Tue, 16 Jun 2026 22:23:43 +0000</pubDate><description>MEDIUM 6.4: Multiple SQL injection vulnerabilities in FlexBB 0.5.5 BETA allow remote attackers to execute arbitrary SQL commands via the (1) id, (2) forumid, or (3) threadid parameter to index.php; the (4) ICQ, (5) AIM, (6) MSN, (7) Google Talk, (8) Website Name, (9) Website Address, (10) Email Address, (11) Lo</description></item><item><title>CVE-2006-1810: Multiple cross-site scripting (XSS) vulnerabilities in FlexBB 0.5.5 BETA allow remote attackers to inject arbi</title><link>https://patchthecve.com/cve/CVE-2006-1810.html</link><guid>https://patchthecve.com/cve/CVE-2006-1810.html</guid><pubDate>Tue, 16 Jun 2026 22:23:43 +0000</pubDate><description>LOW 1.9: Multiple cross-site scripting (XSS) vulnerabilities in FlexBB 0.5.5 BETA allow remote attackers to inject arbitrary web script or HTML via the (1) ICQ, (2) AIM, (3) MSN, (4) Google Talk, (5) Website Name, (6) Website Address, (7) Email Address, (8) Location, (9) Signature, and (10) Sub-Titles fields</description></item></channel></rss>