https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2007-2661.htmlhttps://patchthecve.com/cve/CVE-2007-2661.htmlTue, 16 Jun 2026 22:40:03 +0000HIGH 7.5: SQL injection vulnerability in archshow.asp in BlogMe 3.0 allows remote attackers to execute arbitrary SQL commands via the var parameter, a different vector than CVE-2006-5976.https://patchthecve.com/cve/CVE-2006-5976.htmlhttps://patchthecve.com/cve/CVE-2006-5976.htmlTue, 16 Jun 2026 22:32:14 +0000HIGH 7.5: Multiple SQL injection vulnerabilities in admin_login.asp in BlogMe 3.0 allow remote attackers to execute arbitrary SQL commands via the (1) Username or (2) Password field. NOTE: some of these details are obtained from third party information.https://patchthecve.com/cve/CVE-2006-5975.htmlhttps://patchthecve.com/cve/CVE-2006-5975.htmlTue, 16 Jun 2026 22:32:14 +0000MEDIUM 6.8: Multiple cross-site scripting (XSS) vulnerabilities in comments.asp in BlogMe 3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) URL, or (3) Comments field.