https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2008-2413.htmlhttps://patchthecve.com/cve/CVE-2008-2413.htmlTue, 16 Jun 2026 22:53:44 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in glossaire.php in ACGV News 0.9.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter.https://patchthecve.com/cve/CVE-2008-2412.htmlhttps://patchthecve.com/cve/CVE-2008-2412.htmlTue, 16 Jun 2026 22:53:43 +0000HIGH 7.5: SQL injection vulnerability in glossaire.php in ACGV News 0.9.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.https://patchthecve.com/cve/CVE-2006-4638.htmlhttps://patchthecve.com/cve/CVE-2006-4638.htmlTue, 16 Jun 2026 22:29:30 +0000MEDIUM 5.1: PHP remote file inclusion vulnerability in article.php in ACGV News 0.9.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the PathNews parameter.https://patchthecve.com/cve/CVE-2006-4637.htmlhttps://patchthecve.com/cve/CVE-2006-4637.htmlTue, 16 Jun 2026 22:29:29 +0000MEDIUM 5.1: Multiple PHP remote file inclusion vulnerabilities in ACGV News 0.9.1 allow remote attackers to execute arbitrary PHP code via a URL in the PathNews parameter in (1) header.php or (2) news.php. NOTE: portions of these details are obtained from third party information.