<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: scriptsfeed</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2010-5039: SQL injection vulnerability in control/admin_login.php in ScriptsFeed Recipes Listing Portal 1.0 allows remote</title><link>https://patchthecve.com/cve/CVE-2010-5039.html</link><guid>https://patchthecve.com/cve/CVE-2010-5039.html</guid><pubDate>Tue, 16 Jun 2026 23:26:01 +0000</pubDate><description>HIGH 7.5: SQL injection vulnerability in control/admin_login.php in ScriptsFeed Recipes Listing Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the loginid parameter (aka the UserName field).  NOTE: some of these details are obtained from third party information.</description></item><item><title>CVE-2010-1096: Multiple SQL injection vulnerabilities in searchmatch.php in ScriptsFeed Dating Software allow remote attacker</title><link>https://patchthecve.com/cve/CVE-2010-1096.html</link><guid>https://patchthecve.com/cve/CVE-2010-1096.html</guid><pubDate>Tue, 16 Jun 2026 23:17:30 +0000</pubDate><description>HIGH 7.5: Multiple SQL injection vulnerabilities in searchmatch.php in ScriptsFeed Dating Software allow remote attackers to execute arbitrary SQL commands via the (1) txtgender and (2) txtlookgender parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third p</description></item><item><title>CVE-2010-1092: Multiple SQL injection vulnerabilities in login.php in ScriptsFeed Business Directory Software allow remote at</title><link>https://patchthecve.com/cve/CVE-2010-1092.html</link><guid>https://patchthecve.com/cve/CVE-2010-1092.html</guid><pubDate>Tue, 16 Jun 2026 23:17:29 +0000</pubDate><description>HIGH 7.5: Multiple SQL injection vulnerabilities in login.php in ScriptsFeed Business Directory Software allow remote attackers to execute arbitrary SQL commands via the (1) us and (2) ps parameters.</description></item><item><title>CVE-2008-6944: Unrestricted file upload vulnerability in ScriptsFeed Auto Classifieds allows remote authenticated users to ex</title><link>https://patchthecve.com/cve/CVE-2008-6944.html</link><guid>https://patchthecve.com/cve/CVE-2008-6944.html</guid><pubDate>Tue, 16 Jun 2026 23:03:17 +0000</pubDate><description>MEDIUM 6.5: Unrestricted file upload vulnerability in ScriptsFeed Auto Classifieds allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a profile logo, then accessing it via a direct request to the file in cars_images/.</description></item><item><title>CVE-2008-6943: Unrestricted file upload vulnerability in ScriptsFeed Recipes Listing Portal allows remote authenticated users</title><link>https://patchthecve.com/cve/CVE-2008-6943.html</link><guid>https://patchthecve.com/cve/CVE-2008-6943.html</guid><pubDate>Tue, 16 Jun 2026 23:03:17 +0000</pubDate><description>MEDIUM 6.5: Unrestricted file upload vulnerability in ScriptsFeed Recipes Listing Portal allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a recipe photo, then accessing it via a direct request to the file in pictures/.</description></item><item><title>CVE-2008-6942: Unrestricted file upload vulnerability in ScriptsFeed Realtor Classifieds System (aka Real Estate Classifieds)</title><link>https://patchthecve.com/cve/CVE-2008-6942.html</link><guid>https://patchthecve.com/cve/CVE-2008-6942.html</guid><pubDate>Tue, 16 Jun 2026 23:03:16 +0000</pubDate><description>MEDIUM 6.5: Unrestricted file upload vulnerability in ScriptsFeed Realtor Classifieds System (aka Real Estate Classifieds) allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a profile logo, then accessing it via a direct request to the file in re_imag</description></item></channel></rss>