https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2007-2753.htmlhttps://patchthecve.com/cve/CVE-2007-2753.htmlTue, 16 Jun 2026 22:40:14 +0000MEDIUM 5.0: RunawaySoft Haber portal 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for data/xice.mdb.https://patchthecve.com/cve/CVE-2007-2752.htmlhttps://patchthecve.com/cve/CVE-2007-2752.htmlTue, 16 Jun 2026 22:40:14 +0000MEDIUM 6.4: SQL injection vulnerability in devami.asp in RunawaySoft Haber portal 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.https://patchthecve.com/cve/CVE-2006-4641.htmlhttps://patchthecve.com/cve/CVE-2006-4641.htmlTue, 16 Jun 2026 22:29:30 +0000HIGH 7.5: SQL injection vulnerability in kategori.asp in Muratsoft Haber Portal 3.6 allows remote attackers to execute arbitrary SQL commands via the kat parameter.