https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2007-0696.htmlhttps://patchthecve.com/cve/CVE-2007-0696.htmlTue, 16 Jun 2026 22:36:05 +0000MEDIUM 6.8: Cross-site scripting (XSS) vulnerability in error messages in Free LAN In(tra|ter)net Portal (FLIP) before 1.0-RC3 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, different vectors than CVE-2007-0611.https://patchthecve.com/cve/CVE-2007-0695.htmlhttps://patchthecve.com/cve/CVE-2007-0695.htmlTue, 16 Jun 2026 22:36:05 +0000HIGH 7.5: Multiple SQL injection vulnerabilities in Free LAN In(tra|ter)net Portal (FLIP) before 1.0-RC3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: some sources mention the escape_sqlData, implode_sql, and implode_sqlIn functions, but these are protection schemes,https://patchthecve.com/cve/CVE-2007-0611.htmlhttps://patchthecve.com/cve/CVE-2007-0611.htmlTue, 16 Jun 2026 22:35:55 +0000MEDIUM 6.8: Multiple cross-site scripting (XSS) vulnerabilities in Free LAN In(tra|ter)net Portal (FLIP) before 1.0-RC2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors in (1) inc.page.php and (2) inc.text.php.