https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2007-0592.htmlhttps://patchthecve.com/cve/CVE-2007-0592.htmlTue, 16 Jun 2026 22:35:53 +0000MEDIUM 6.8: Cross-site scripting (XSS) vulnerability in EzDatabase 2.1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to admin/login.php and the Admin Panel Database.https://patchthecve.com/cve/CVE-2006-0315.htmlhttps://patchthecve.com/cve/CVE-2006-0315.htmlTue, 16 Jun 2026 22:20:19 +0000MEDIUM 5.8: index.php in EZDatabase before 2.1.2 does not properly cleanse the p parameter before constructing and including a .php filename, which allows remote attackers to conduct directory traversal attacks, and produces resultant cross-site scripting (XSS) and path disclosure.https://patchthecve.com/cve/CVE-2006-0214.htmlhttps://patchthecve.com/cve/CVE-2006-0214.htmlTue, 16 Jun 2026 22:20:07 +0000HIGH 7.5: Eval injection vulnerability in ezDatabase 2.0 and earlier allows remote attackers to execute arbitrary PHP code via the db_id parameter to visitorupload.php, as demonstrated using phpinfo and include function calls.https://patchthecve.com/cve/CVE-2005-4304.htmlhttps://patchthecve.com/cve/CVE-2005-4304.htmlTue, 16 Jun 2026 22:18:33 +0000MEDIUM 5.0: index.php in ezDatabase 2.1.2 and earlier allows remote attackers to obtain sensitive information via an invalid cat_id parameter, which leaks the full pathname in an error message. NOTE: these details are uncertain because the original report has terminology problems and lack of relevant details. https://patchthecve.com/cve/CVE-2005-4303.htmlhttps://patchthecve.com/cve/CVE-2005-4303.htmlTue, 16 Jun 2026 22:18:33 +0000HIGH 7.5: SQL injection vulnerability in index.php for ezDatabase 2.1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the db_id parameter.https://patchthecve.com/cve/CVE-2005-4302.htmlhttps://patchthecve.com/cve/CVE-2005-4302.htmlTue, 16 Jun 2026 22:18:32 +0000MEDIUM 5.0: Directory traversal vulnerability in index.php in ezDatabase 2.1.2 and earlier allows remote attackers to include arbitrary local files via ".." sequences in the p parameter.