https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2011-5091.htmlhttps://patchthecve.com/cve/CVE-2011-5091.htmlTue, 16 Jun 2026 23:35:55 +0000HIGH 7.5: Multiple SQL injection vulnerabilities in GR Board (aka grboard) 1.8.6.5 Community Edition allow remote attackers to execute arbitrary SQL commands via the (1) tableType or (2) blindTarget parameter to view.php, (3) the delTargets[0] parameter to view_memo.php, or (4) the isReported parameter to wrihttps://patchthecve.com/cve/CVE-2011-5090.htmlhttps://patchthecve.com/cve/CVE-2011-5090.htmlTue, 16 Jun 2026 23:35:55 +0000MEDIUM 6.4: GR Board (aka grboard) 1.8.6.5 Community Edition does not require authentication for certain database actions, which allows remote attackers to modify or delete data via a request to (1) mod_rewrite.php, (2) comment_write_ok.php, (3) poll/index.php, (4) update/index.php, (5) trackback.php, or (6) anhttps://patchthecve.com/cve/CVE-2009-0444.htmlhttps://patchthecve.com/cve/CVE-2009-0444.htmlTue, 16 Jun 2026 23:05:03 +0000HIGH 7.5: Multiple PHP remote file inclusion vulnerabilities in GRBoard 1.8, when register_globals is enabled and magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) theme parameter to (a) 179_squarebox_pds_list/view.php, (b) 179_squarebox_minishop_expand/vi