https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2017-12971.htmlhttps://patchthecve.com/cve/CVE-2017-12971.htmlWed, 17 Jun 2026 01:04:14 +0000MEDIUM 6.1: Cross-site scripting (XSS) vulnerability in Apache2Triad 1.5.4 allows remote attackers to inject arbitrary web script or HTML via the account parameter to phpsftpd/users.php.https://patchthecve.com/cve/CVE-2017-12970.htmlhttps://patchthecve.com/cve/CVE-2017-12970.htmlWed, 17 Jun 2026 01:04:14 +0000HIGH 8.8: Cross-site request forgery (CSRF) vulnerability in Apache2Triad 1.5.4 allows remote attackers to hijack the authentication of authenticated users for requests that (1) add or (2) delete user accounts via a request to phpsftpd/users.php.https://patchthecve.com/cve/CVE-2017-12965.htmlhttps://patchthecve.com/cve/CVE-2017-12965.htmlWed, 17 Jun 2026 01:04:13 +0000CRITICAL 9.8: Session fixation vulnerability in Apache2Triad 1.5.4 allows remote attackers to hijack web sessions via the PHPSESSID parameter.