https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2007-3451.htmlhttps://patchthecve.com/cve/CVE-2007-3451.htmlTue, 16 Jun 2026 22:42:03 +0000MEDIUM 6.5: PHP remote file inclusion vulnerability in admin/index.php in 6ALBlog allows remote authenticated administrators to execute arbitrary PHP code via a URL in the pg parameter.https://patchthecve.com/cve/CVE-2007-3450.htmlhttps://patchthecve.com/cve/CVE-2007-3450.htmlTue, 16 Jun 2026 22:42:03 +0000MEDIUM 6.8: SQL injection vulnerability in member.php in 6ALBlog allows remote attackers to execute arbitrary SQL commands via the member parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.https://patchthecve.com/cve/CVE-2007-3449.htmlhttps://patchthecve.com/cve/CVE-2007-3449.htmlTue, 16 Jun 2026 22:42:03 +0000MEDIUM 6.8: SQL injection vulnerability in member.php in 6ALBlog allows remote attackers to execute arbitrary SQL commands via the newsid parameter.