https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2009-1489.htmlhttps://patchthecve.com/cve/CVE-2009-1489.htmlTue, 16 Jun 2026 23:07:22 +0000HIGH 7.5: includes/user.php in Fungamez RC1 allows remote attackers to bypass authentication and gain administrative access by setting the user cookie parameter.https://patchthecve.com/cve/CVE-2009-1488.htmlhttps://patchthecve.com/cve/CVE-2009-1488.htmlTue, 16 Jun 2026 23:07:22 +0000MEDIUM 6.8: Directory traversal vulnerability in admin/load.php in FunGamez RC1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the module parameter to index.php.https://patchthecve.com/cve/CVE-2009-1487.htmlhttps://patchthecve.com/cve/CVE-2009-1487.htmlTue, 16 Jun 2026 23:07:22 +0000HIGH 7.5: SQL injection vulnerability in pages/login.php in FunGamez RC1 allows remote attackers to execute arbitrary SQL commands via the login_user (aka username) parameter. NOTE: some of these details are obtained from third party information.