<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: web4future</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2006-2244: Multiple SQL injection vulnerabilities in Web4Future News Portal allow remote attackers to execute arbitrary S</title><link>https://patchthecve.com/cve/CVE-2006-2244.html</link><guid>https://patchthecve.com/cve/CVE-2006-2244.html</guid><pubDate>Tue, 16 Jun 2026 22:24:37 +0000</pubDate><description>MEDIUM 6.4: Multiple SQL injection vulnerabilities in Web4Future News Portal allow remote attackers to execute arbitrary SQL commands via the ID parameter to (1) comentarii.php or (2) view.php.</description></item><item><title>CVE-2006-2243: Multiple cross-site scripting (XSS) vulnerabilities in Web4Future News Portal allow remote attackers to inject</title><link>https://patchthecve.com/cve/CVE-2006-2243.html</link><guid>https://patchthecve.com/cve/CVE-2006-2243.html</guid><pubDate>Tue, 16 Jun 2026 22:24:37 +0000</pubDate><description>MEDIUM 5.8: Multiple cross-site scripting (XSS) vulnerabilities in Web4Future News Portal allow remote attackers to inject arbitrary web script or HTML via the ID parameter to (1) comentarii.php or (2) view.php.  NOTE: this issue might be resultant from SQL injection.</description></item><item><title>CVE-2005-4039: Directory traversal vulnerability in arhiva.php in Web4Future Portal Solutions News Portal allows remote attac</title><link>https://patchthecve.com/cve/CVE-2005-4039.html</link><guid>https://patchthecve.com/cve/CVE-2005-4039.html</guid><pubDate>Tue, 16 Jun 2026 22:18:06 +0000</pubDate><description>HIGH 7.8: Directory traversal vulnerability in arhiva.php in Web4Future Portal Solutions News Portal allows remote attackers to read arbitrary files via the dir parameter.</description></item><item><title>CVE-2005-4038: SQL injection vulnerability in comentarii.php in Web4Future Portal Solutions News Portal allows remote attacke</title><link>https://patchthecve.com/cve/CVE-2005-4038.html</link><guid>https://patchthecve.com/cve/CVE-2005-4038.html</guid><pubDate>Tue, 16 Jun 2026 22:18:06 +0000</pubDate><description>HIGH 7.5: SQL injection vulnerability in comentarii.php in Web4Future Portal Solutions News Portal allows remote attackers to execute arbitrary SQL commands via the idp parameter.</description></item><item><title>CVE-2005-4036: Cross-site scripting (XSS) vulnerability in index.cgi in Web4Future KeyWord Frequency Counter 1.0 allows remot</title><link>https://patchthecve.com/cve/CVE-2005-4036.html</link><guid>https://patchthecve.com/cve/CVE-2005-4036.html</guid><pubDate>Tue, 16 Jun 2026 22:18:06 +0000</pubDate><description>MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in index.cgi in Web4Future KeyWord Frequency Counter 1.0 allows remote attackers to inject arbitrary web script or HTML via the &quot;remote URL.&quot;</description></item><item><title>CVE-2005-4034: Multiple SQL injection vulnerabilities in Web4Future eDating Professional 5 allow remote attackers to execute </title><link>https://patchthecve.com/cve/CVE-2005-4034.html</link><guid>https://patchthecve.com/cve/CVE-2005-4034.html</guid><pubDate>Tue, 16 Jun 2026 22:18:05 +0000</pubDate><description>HIGH 7.5: Multiple SQL injection vulnerabilities in Web4Future eDating Professional 5 allow remote attackers to execute arbitrary SQL commands via the (1) s, (2) pg, and (3) sortb parameters to (a) index.php; (4) cid parameter to (b) gift.php and (c) fq.php; and (5) cat parameter to (d) articles.php.</description></item></channel></rss>