https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-4493.htmlhttps://patchthecve.com/cve/CVE-2023-4493.htmlWed, 17 Jun 2026 06:37:57 +0000MEDIUM 6.1: Stored Cross-Site Scripting in Easy Address Book Web Server 1.6 version, through the users_admin.ghp file that affects multiple parameters such as (firstname, homephone, lastname, lastname, middlename, workaddress, workcity, workcountry, workphone, workstate, workzip). This vulnerability allows a rehttps://patchthecve.com/cve/CVE-2023-4492.htmlhttps://patchthecve.com/cve/CVE-2023-4492.htmlWed, 17 Jun 2026 06:37:56 +0000MEDIUM 6.1: Vulnerability in Easy Address Book Web Server 1.6 version, affecting the parameters (firstname, homephone, lastname, middlename, workaddress, workcity, workcountry, workphone, workstate and workzip) of the /addrbook.ghp file, allowing an attacker to inject a JavaScript payload specially designed to https://patchthecve.com/cve/CVE-2023-4491.htmlhttps://patchthecve.com/cve/CVE-2023-4491.htmlWed, 17 Jun 2026 06:37:56 +0000CRITICAL 9.8: Buffer overflow vulnerability in Easy Address Book Web Server 1.6 version. The exploitation of this vulnerability could allow an attacker to send a very long username string to /searchbook.ghp, asking for the name via a POST request, resulting in arbitrary code execution on the remote machine.https://patchthecve.com/cve/CVE-2006-4654.htmlhttps://patchthecve.com/cve/CVE-2006-4654.htmlTue, 16 Jun 2026 22:29:31 +0000MEDIUM 5.1: Format string vulnerability in Easy Address Book Web Server 1.2 allows remote attackers to cause a denial of service (crash) or "compromise the server" via encoded format string specifiers in the query string.