<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: opendock</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2006-5244: Multiple PHP remote file inclusion vulnerabilities in OpenDock Easy Blog 1.4 and earlier, when register_global</title><link>https://patchthecve.com/cve/CVE-2006-5244.html</link><guid>https://patchthecve.com/cve/CVE-2006-5244.html</guid><pubDate>Tue, 16 Jun 2026 22:30:49 +0000</pubDate><description>MEDIUM 5.1: Multiple PHP remote file inclusion vulnerabilities in OpenDock Easy Blog 1.4 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the doc_directory parameter in (1) down_stat.php, (2) file.php, (3) find_file.php, (4) lib_read_file.php, and </description></item><item><title>CVE-2006-5243: Multiple PHP remote file inclusion vulnerabilities in OpenDock Easy Doc 1.4 and earlier, when register_globals</title><link>https://patchthecve.com/cve/CVE-2006-5243.html</link><guid>https://patchthecve.com/cve/CVE-2006-5243.html</guid><pubDate>Tue, 16 Jun 2026 22:30:49 +0000</pubDate><description>HIGH 7.5: Multiple PHP remote file inclusion vulnerabilities in OpenDock Easy Doc 1.4 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the doc_directory parameter in (1) down_stat.php, (2) file.php, (3) find_file.php, (4) lib_file.php, and (5) li</description></item><item><title>CVE-2006-5241: Multiple PHP remote file inclusion vulnerabilities in OpenDock Easy Gallery 1.4 and earlier, when register_glo</title><link>https://patchthecve.com/cve/CVE-2006-5241.html</link><guid>https://patchthecve.com/cve/CVE-2006-5241.html</guid><pubDate>Tue, 16 Jun 2026 22:30:49 +0000</pubDate><description>MEDIUM 5.1: Multiple PHP remote file inclusion vulnerabilities in OpenDock Easy Gallery 1.4 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the doc_directory parameter in (1) file.php; (2) find_user.php, (3) lib_user.php, (4) lib_form_user.php, an</description></item></channel></rss>