<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: infireal</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2008-6956: Static code injection vulnerability in admin/admin.php in mxCamArchive 2.2 allows remote authenticated adminis</title><link>https://patchthecve.com/cve/CVE-2008-6956.html</link><guid>https://patchthecve.com/cve/CVE-2008-6956.html</guid><pubDate>Tue, 16 Jun 2026 23:03:18 +0000</pubDate><description>MEDIUM 6.5: Static code injection vulnerability in admin/admin.php in mxCamArchive 2.2 allows remote authenticated administrators to inject arbitrary PHP code into an unspecified program via the description parameter, which is executed by invocation of index.php.  NOTE: some of these details are obtained from t</description></item><item><title>CVE-2008-6955: mxCamArchive 2.2 stores sensitive information under the web root with insufficient access control, which allow</title><link>https://patchthecve.com/cve/CVE-2008-6955.html</link><guid>https://patchthecve.com/cve/CVE-2008-6955.html</guid><pubDate>Tue, 16 Jun 2026 23:03:18 +0000</pubDate><description>HIGH 7.5: mxCamArchive 2.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain configuration details and passwords via a direct request for archive/config.ini.</description></item><item><title>CVE-2008-6263: SQL injection vulnerability in lib/user/t_user.php in SaturnCMS allows remote attackers to execute arbitrary S</title><link>https://patchthecve.com/cve/CVE-2008-6263.html</link><guid>https://patchthecve.com/cve/CVE-2008-6263.html</guid><pubDate>Tue, 16 Jun 2026 23:01:55 +0000</pubDate><description>HIGH 7.5: SQL injection vulnerability in lib/user/t_user.php in SaturnCMS allows remote attackers to execute arbitrary SQL commands via the username parameter to the _userLoggedIn function.  NOTE: some of these details are obtained from third party information.</description></item><item><title>CVE-2008-6262: SQL injection vulnerability in lib/url/meta_url.php in SaturnCMS allows remote attackers to execute arbitrary </title><link>https://patchthecve.com/cve/CVE-2008-6262.html</link><guid>https://patchthecve.com/cve/CVE-2008-6262.html</guid><pubDate>Tue, 16 Jun 2026 23:01:54 +0000</pubDate><description>HIGH 7.5: SQL injection vulnerability in lib/url/meta_url.php in SaturnCMS allows remote attackers to execute arbitrary SQL commands via the URL to the translate function.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.</description></item></channel></rss>