https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2007-1852.htmlhttps://patchthecve.com/cve/CVE-2007-1852.htmlTue, 16 Jun 2026 22:38:25 +0000MEDIUM 6.8: Multiple PHP remote file inclusion vulnerabilities in 2BGal 3.1.1 allow remote attackers to execute arbitrary PHP code via a URL in the lang_filename parameter to (1) index.php or (2) backupdb.inc.php in admin/, or other unspecified files, different vectors than CVE-2006-5505. NOTE: this issue has bhttps://patchthecve.com/cve/CVE-2006-5505.htmlhttps://patchthecve.com/cve/CVE-2006-5505.htmlTue, 16 Jun 2026 22:31:20 +0000HIGH 7.5: Multiple PHP file inclusion vulnerabilities in 2BGal 3.0 allow remote attackers to execute arbitrary PHP code via the lang parameter to (1) admin/configuration.inc.php, (2) admin/creer_album.inc.php, (3) admin/changepwd.php.inc, and unspecified other files. NOTE: the provenance of this information https://patchthecve.com/cve/CVE-2004-1415.htmlhttps://patchthecve.com/cve/CVE-2004-1415.htmlTue, 16 Jun 2026 22:07:39 +0000MEDIUM 5.0: SQL injection vulnerability in (1) disp_album.php and possibly (2) disp_img.php in 2Bgal 2.4 and 2.5.1 allows remote attackers to execute arbitrary SQL commands via the id_album parameter.