https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2019-7748.htmlhttps://patchthecve.com/cve/CVE-2019-7748.htmlWed, 17 Jun 2026 02:40:56 +0000MEDIUM 6.1: _includes\online.php in DbNinja 3.2.7 allows XSS via the data.php task parameter if _users/admin/tasks.php exists.https://patchthecve.com/cve/CVE-2019-7747.htmlhttps://patchthecve.com/cve/CVE-2019-7747.htmlWed, 17 Jun 2026 02:40:56 +0000CRITICAL 9.6: DbNinja 3.2.7 allows session fixation via the data.php sessid parameter.https://patchthecve.com/cve/CVE-2019-7545.htmlhttps://patchthecve.com/cve/CVE-2019-7545.htmlWed, 17 Jun 2026 02:40:40 +0000MEDIUM 5.4: In DbNinja 3.2.7, the Add Host function of the Manage Hosts pages has a Stored Cross-site Scripting (XSS) vulnerability in the User Name field.