<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: scriptmate</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2006-6595: Multiple SQL injection vulnerabilities in ScriptMate User Manager 2.1 and earlier allow remote attackers to ex</title><link>https://patchthecve.com/cve/CVE-2006-6595.html</link><guid>https://patchthecve.com/cve/CVE-2006-6595.html</guid><pubDate>Tue, 16 Jun 2026 22:33:26 +0000</pubDate><description>HIGH 7.5: Multiple SQL injection vulnerabilities in ScriptMate User Manager 2.1 and earlier allow remote attackers to execute arbitrary SQL commands via &quot;Manage Resources&quot; and possibly other unspecified components.</description></item><item><title>CVE-2006-6594: SQL injection vulnerability in utilities/usermessages.asp in ScriptMate User Manager 2.0 allows remote attacke</title><link>https://patchthecve.com/cve/CVE-2006-6594.html</link><guid>https://patchthecve.com/cve/CVE-2006-6594.html</guid><pubDate>Tue, 16 Jun 2026 22:33:25 +0000</pubDate><description>HIGH 7.5: SQL injection vulnerability in utilities/usermessages.asp in ScriptMate User Manager 2.0 allows remote attackers to execute arbitrary SQL commands via the mesid parameter.</description></item><item><title>CVE-2006-6583: ScriptMate User Manager 2.1 and earlier allow remote attackers to obtain sensitive information via unspecified</title><link>https://patchthecve.com/cve/CVE-2006-6583.html</link><guid>https://patchthecve.com/cve/CVE-2006-6583.html</guid><pubDate>Tue, 16 Jun 2026 22:33:24 +0000</pubDate><description>HIGH 7.5: ScriptMate User Manager 2.1 and earlier allow remote attackers to obtain sensitive information via unspecified vectors related to (1) the Logins box and (2) the Search box.</description></item><item><title>CVE-2006-6582: Multiple cross-site scripting (XSS) vulnerabilities in ScriptMate User Manager 2.1 and earlier allow remote at</title><link>https://patchthecve.com/cve/CVE-2006-6582.html</link><guid>https://patchthecve.com/cve/CVE-2006-6582.html</guid><pubDate>Tue, 16 Jun 2026 22:33:24 +0000</pubDate><description>MEDIUM 6.8: Multiple cross-site scripting (XSS) vulnerabilities in ScriptMate User Manager 2.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) members_username (user) and (2) members_password (password) fields in a login action in members/default.asp, and (3) the Search box</description></item></channel></rss>