https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2006-2585.htmlhttps://patchthecve.com/cve/CVE-2006-2585.htmlTue, 16 Jun 2026 22:25:22 +0000MEDIUM 6.4: SQL injection vulnerability in Destiney Links Script 2.1.2 allows remote attackers to execute arbitrary SQL commands via the ID parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.https://patchthecve.com/cve/CVE-2006-2536.htmlhttps://patchthecve.com/cve/CVE-2006-2536.htmlTue, 16 Jun 2026 22:25:16 +0000MEDIUM 5.8: Cross-site scripting (XSS) vulnerability in Destiney Links Script 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the (1) "Search" (term parameter in index.php) and (2) "Add a Site" (add.php) fields.https://patchthecve.com/cve/CVE-2006-2535.htmlhttps://patchthecve.com/cve/CVE-2006-2535.htmlTue, 16 Jun 2026 22:25:16 +0000MEDIUM 5.0: index.php in Destiney Links Script 2.1.2 allows remote attackers to obtain the installation path via an invalid show parameter referencing a non-existent file, which reveals the path in the resulting error message. NOTE: this issue might be resultant from a more serious issue such as directory travhttps://patchthecve.com/cve/CVE-2006-2534.htmlhttps://patchthecve.com/cve/CVE-2006-2534.htmlTue, 16 Jun 2026 22:25:16 +0000MEDIUM 5.0: Destiney Links Script 2.1.2 does not protect library and other support files, which allows remote attackers to obtain the installation path via a direct URL to files in the (1) include and (2) themes/original directories.