<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: maxiasp</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2006-6672: Multiple SQL injection vulnerabilities in Burak Yylmaz Download Portal allow remote attackers to execute arbit</title><link>https://patchthecve.com/cve/CVE-2006-6672.html</link><guid>https://patchthecve.com/cve/CVE-2006-6672.html</guid><pubDate>Tue, 16 Jun 2026 22:33:34 +0000</pubDate><description>HIGH 7.5: Multiple SQL injection vulnerabilities in Burak Yylmaz Download Portal allow remote attackers to execute arbitrary SQL commands via the (1) kid or possibly (2) id parameter to (a) HABERLER.ASP and (b) ASPKAT.ASP.  NOTE: The provenance of this information is unknown; the details are obtained solely f</description></item><item><title>CVE-2006-6671: SQL injection vulnerability in down.asp in Burak Yylmaz Download Portal allows remote attackers to execute arb</title><link>https://patchthecve.com/cve/CVE-2006-6671.html</link><guid>https://patchthecve.com/cve/CVE-2006-6671.html</guid><pubDate>Tue, 16 Jun 2026 22:33:34 +0000</pubDate><description>HIGH 7.5: SQL injection vulnerability in down.asp in Burak Yylmaz Download Portal allows remote attackers to execute arbitrary SQL commands via the id parameter.</description></item><item><title>CVE-2006-6298: SQL injection vulnerability in uye_giris_islem.asp in Metyus Okul Yonetim Sistemi 1.0 allows remote attackers </title><link>https://patchthecve.com/cve/CVE-2006-6298.html</link><guid>https://patchthecve.com/cve/CVE-2006-6298.html</guid><pubDate>Tue, 16 Jun 2026 22:32:52 +0000</pubDate><description>HIGH 7.5: SQL injection vulnerability in uye_giris_islem.asp in Metyus Okul Yonetim Sistemi 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) kullanici_ismi and (2) sifre parameters.</description></item></channel></rss>