https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2006-1835.htmlhttps://patchthecve.com/cve/CVE-2006-1835.htmlTue, 16 Jun 2026 22:23:46 +0000LOW 2.6: Cross-site scripting (XSS) vulnerability in yearcal.php in Calendarix allows remote attackers to inject arbitrary web script or HTML via the ycyear parameter.https://patchthecve.com/cve/CVE-2005-1865.htmlhttps://patchthecve.com/cve/CVE-2005-1865.htmlTue, 16 Jun 2026 22:13:49 +0000HIGH 7.5: Multiple SQL injection vulnerabilities in Calendarix Advanced 1.5 allow remote attackers to execute arbitrary SQL commands via the catview parameter to (1) cal_week.php, (2) cal_cat.php, or (3) cal_day.php, or (4) id parameter to cal_pophols.php.https://patchthecve.com/cve/CVE-2005-1864.htmlhttps://patchthecve.com/cve/CVE-2005-1864.htmlTue, 16 Jun 2026 22:13:49 +0000MEDIUM 5.0: PHP remote file inclusion vulnerability in cal_admintop.php in Calendarix Advanced 1.5 allows remote attackers to execute arbitrary PHP code via the calpath parameter.https://patchthecve.com/cve/CVE-2005-1866.htmlhttps://patchthecve.com/cve/CVE-2005-1866.htmlTue, 16 Jun 2026 22:13:49 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in calendar.php in Calendarix Advanced 1.5 allows remote attackers to inject arbitrary web script or HTML via the year parameter.