https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2008-6119.htmlhttps://patchthecve.com/cve/CVE-2008-6119.htmlTue, 16 Jun 2026 23:01:39 +0000HIGH 7.5: Static code injection vulnerability in gooplecms/admin/account/action/editpass.php in Goople CMS 1.7 allows remote attackers to inject arbitrary PHP code into admin/userandpass.php via the (1) username and (2) password parameters. NOTE: the provenance of this information is unknown; the details arehttps://patchthecve.com/cve/CVE-2008-6118.htmlhttps://patchthecve.com/cve/CVE-2008-6118.htmlTue, 16 Jun 2026 23:01:39 +0000HIGH 7.5: win/content/upload.php in Goople CMS 1.7 allows remote attackers to bypass authentication and gain administrative access by setting the loggedin cookie to 1.https://patchthecve.com/cve/CVE-2009-0121.htmlhttps://patchthecve.com/cve/CVE-2009-0121.htmlTue, 16 Jun 2026 23:04:17 +0000HIGH 7.5: SQL injection vulnerability in frontpage.php in Goople CMS 1.8.2 allows remote attackers to execute arbitrary SQL commands via the password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.https://patchthecve.com/cve/CVE-2009-0111.htmlhttps://patchthecve.com/cve/CVE-2009-0111.htmlTue, 16 Jun 2026 23:04:16 +0000HIGH 7.5: SQL injection vulnerability in frontpage.php in Goople CMS 1.8.2 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter.