https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2009-4719.htmlhttps://patchthecve.com/cve/CVE-2009-4719.htmlTue, 16 Jun 2026 23:14:13 +0000HIGH 7.5: SQL injection vulnerability in index.php in Discloser 0.0.4 rc2 allows remote attackers to execute arbitrary SQL commands via the more parameter.https://patchthecve.com/cve/CVE-2006-4557.htmlhttps://patchthecve.com/cve/CVE-2006-4557.htmlTue, 16 Jun 2026 22:29:20 +0000HIGH 7.5: PHP remote file inclusion vulnerability in plugins/plugins.php in Bob Jewell Discloser 0.0.4 allows remote attackers to execute arbitrary PHP code via a URL in the type parameter. NOTE: another researcher has stated that an attacker cannot control the type parameter. As of 20060901, CVE analysis chttps://patchthecve.com/cve/CVE-2006-4207.htmlhttps://patchthecve.com/cve/CVE-2006-4207.htmlTue, 16 Jun 2026 22:28:36 +0000HIGH 7.5: Multiple PHP remote file inclusion vulnerabilities in Bob Jewell Discloser 0.0.4 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the fileloc parameter to (1) content/content.php or (2) /inc/indexhead.php.