<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: softerra</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2007-1787: Multiple PHP remote file inclusion vulnerabilities in lib/timesheet.class.php in Softerra Time-Assistant 6.2 a</title><link>https://patchthecve.com/cve/CVE-2007-1787.html</link><guid>https://patchthecve.com/cve/CVE-2007-1787.html</guid><pubDate>Tue, 16 Jun 2026 22:38:17 +0000</pubDate><description>HIGH 9.3: Multiple PHP remote file inclusion vulnerabilities in lib/timesheet.class.php in Softerra Time-Assistant 6.2 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) inc_dir or (2) lib_dir parameter.</description></item><item><title>CVE-2006-5473: PHP remote file inclusion vulnerability in Description.php in Softerra PHP Developer Library 1.5.3 and earlier</title><link>https://patchthecve.com/cve/CVE-2006-5473.html</link><guid>https://patchthecve.com/cve/CVE-2006-5473.html</guid><pubDate>Tue, 16 Jun 2026 22:31:16 +0000</pubDate><description>HIGH 7.5: PHP remote file inclusion vulnerability in Description.php in Softerra PHP Developer Library 1.5.3 and earlier allows remote attackers to execute arbitrary PHP code via the lib_dir parameter.  NOTE: this issue is disputed by CVE as of 20061023, since there is no Description.php file included in the </description></item><item><title>CVE-2006-5472: PHP remote file inclusion vulnerability in Softerra PHP Developer Library 1.5.3 and earlier allows remote atta</title><link>https://patchthecve.com/cve/CVE-2006-5472.html</link><guid>https://patchthecve.com/cve/CVE-2006-5472.html</guid><pubDate>Tue, 16 Jun 2026 22:31:16 +0000</pubDate><description>HIGH 7.5: PHP remote file inclusion vulnerability in Softerra PHP Developer Library 1.5.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the lib_dir parameter in (1) lib/registry.lib.php, (2) lib/sqlcompose.lib.php, and (3) lib/sqlsearch.lib.php.</description></item><item><title>CVE-2006-5471: PHP remote file inclusion vulnerability in example/lib/grid3.lib.php in Softerra PHP Developer Library 1.5.3 a</title><link>https://patchthecve.com/cve/CVE-2006-5471.html</link><guid>https://patchthecve.com/cve/CVE-2006-5471.html</guid><pubDate>Tue, 16 Jun 2026 22:31:16 +0000</pubDate><description>HIGH 7.5: PHP remote file inclusion vulnerability in example/lib/grid3.lib.php in Softerra PHP Developer Library 1.5.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the (1) cfg_dir and (2) lib_dir parameters.</description></item></channel></rss>