<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: gimmie project</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2014-125086: A vulnerability has been found in Gimmie Plugin 1.2.2 on vBulletin and classified as critical</title><link>https://patchthecve.com/cve/CVE-2014-125086.html</link><guid>https://patchthecve.com/cve/CVE-2014-125086.html</guid><pubDate>Wed, 17 Jun 2026 00:04:25 +0000</pubDate><description>MEDIUM 5.5: A vulnerability has been found in Gimmie Plugin 1.2.2 on vBulletin and classified as critical. Affected by this vulnerability is an unknown functionality of the file trigger_login.php. The manipulation of the argument userid leads to sql injection. Upgrading to version 1.3.0 is able to address this </description></item><item><title>CVE-2014-125085: A vulnerability, which was classified as critical, was found in Gimmie Plugin 1.2.2 on vBulletin</title><link>https://patchthecve.com/cve/CVE-2014-125085.html</link><guid>https://patchthecve.com/cve/CVE-2014-125085.html</guid><pubDate>Wed, 17 Jun 2026 00:04:25 +0000</pubDate><description>MEDIUM 5.5: A vulnerability, which was classified as critical, was found in Gimmie Plugin 1.2.2 on vBulletin. Affected is an unknown function of the file trigger_ratethread.php. The manipulation of the argument t/postusername leads to sql injection. Upgrading to version 1.3.0 is able to address this issue. The </description></item><item><title>CVE-2014-125084: A vulnerability, which was classified as critical, has been found in Gimmie Plugin 1.2.2 on vBulletin</title><link>https://patchthecve.com/cve/CVE-2014-125084.html</link><guid>https://patchthecve.com/cve/CVE-2014-125084.html</guid><pubDate>Wed, 17 Jun 2026 00:04:25 +0000</pubDate><description>MEDIUM 5.5: A vulnerability, which was classified as critical, has been found in Gimmie Plugin 1.2.2 on vBulletin. This issue affects some unknown processing of the file trigger_referral.php. The manipulation of the argument referrername leads to sql injection. Upgrading to version 1.3.0 is able to address this</description></item></channel></rss>