<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: logicnow</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2005-0343: SQL injection vulnerability in PerlDesk 1.x allows remote attackers to inject arbitrary SQL commands via the v</title><link>https://patchthecve.com/cve/CVE-2005-0343.html</link><guid>https://patchthecve.com/cve/CVE-2005-0343.html</guid><pubDate>Tue, 16 Jun 2026 22:10:56 +0000</pubDate><description>HIGH 7.5: SQL injection vulnerability in PerlDesk 1.x allows remote attackers to inject arbitrary SQL commands via the view parameter.</description></item><item><title>CVE-2004-1678: Directory traversal vulnerability in pdesk.cgi in PerlDesk allows remote attackers to read portions of arbitra</title><link>https://patchthecve.com/cve/CVE-2004-1678.html</link><guid>https://patchthecve.com/cve/CVE-2004-1678.html</guid><pubDate>Tue, 16 Jun 2026 22:08:11 +0000</pubDate><description>MEDIUM 5.0: Directory traversal vulnerability in pdesk.cgi in PerlDesk allows remote attackers to read portions of arbitrary files and possibly execute arbitrary Perl modules via &quot;..&quot; sequences terminated by a %00 (null) character in the lang parameter, which can leak portions of the requested files if a compil</description></item><item><title>CVE-2004-1677: pdesk.cgi in PerlDesk allows remote attackers to gain sensitive information via an invalid lang parameter, whi</title><link>https://patchthecve.com/cve/CVE-2004-1677.html</link><guid>https://patchthecve.com/cve/CVE-2004-1677.html</guid><pubDate>Tue, 16 Jun 2026 22:08:11 +0000</pubDate><description>MEDIUM 5.0: pdesk.cgi in PerlDesk allows remote attackers to gain sensitive information via an invalid lang parameter, which includes pathname information in an error message.</description></item></channel></rss>