PatchTheCVE: angelinecmshttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2006-2329: AngelineCMS 0.6.5 and earlier allow remote attackers to obtain sensitive information via a direct request for https://patchthecve.com/cve/CVE-2006-2329.htmlhttps://patchthecve.com/cve/CVE-2006-2329.htmlTue, 16 Jun 2026 22:24:47 +0000MEDIUM 5.0: AngelineCMS 0.6.5 and earlier allow remote attackers to obtain sensitive information via a direct request for (1) adodb-access.inc.php, (2) adodb-ado.inc.php, (3) adodb-ado_access.inc, (4) adodb-ado_mssql.inc.php, (5) adodb-borland_ibase, (6) adodb-csv.inc.php, (7) adodb-db2.inc.php, (8) adodb-fbsqlCVE-2006-2328: SQL injection vulnerability in lib/adodb/server.php in AngelineCMS 0.6.5 and earlier might allow remote attackhttps://patchthecve.com/cve/CVE-2006-2328.htmlhttps://patchthecve.com/cve/CVE-2006-2328.htmlTue, 16 Jun 2026 22:24:47 +0000MEDIUM 6.4: SQL injection vulnerability in lib/adodb/server.php in AngelineCMS 0.6.5 and earlier might allow remote attackers to execute arbitrary SQL commands via the query string.CVE-2006-1653: PHP remote file inclusion vulnerability in loadkernel.php in AngelineCMS 0.8.1 allows remote attackers to exechttps://patchthecve.com/cve/CVE-2006-1653.htmlhttps://patchthecve.com/cve/CVE-2006-1653.htmlTue, 16 Jun 2026 22:23:22 +0000HIGH 7.5: PHP remote file inclusion vulnerability in loadkernel.php in AngelineCMS 0.8.1 allows remote attackers to execute arbitrary PHP code via a URL in the installPath parameter.