https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-24573.htmlhttps://patchthecve.com/cve/CVE-2022-24573.htmlThu, 09 Jul 2026 01:17:17 +0000MEDIUM 6.1: A stored cross-site scripting (XSS) vulnerability in the admin interface in Element-IT HTTP Commander 7.0.0 allows unauthenticated users to get admin access by injecting a malicious script in the User-Agent field.https://patchthecve.com/cve/CVE-2021-40813.htmlhttps://patchthecve.com/cve/CVE-2021-40813.htmlWed, 17 Jun 2026 04:07:28 +0000MEDIUM 5.4: A cross-site scripting (XSS) vulnerability in the "Zip content" feature in Element-IT HTTP Commander 3.1.9 allows remote authenticated users to inject arbitrary web script or HTML via filenames.https://patchthecve.com/cve/CVE-2021-33213.htmlhttps://patchthecve.com/cve/CVE-2021-33213.htmlWed, 17 Jun 2026 03:54:21 +0000MEDIUM 6.5: An SSRF vulnerability in the "Upload from URL" feature in Elements-IT HTTP Commander 5.3.3 allows remote authenticated users to retrieve HTTP and FTP files from the internal server network by inserting an internal address.https://patchthecve.com/cve/CVE-2021-33212.htmlhttps://patchthecve.com/cve/CVE-2021-33212.htmlWed, 17 Jun 2026 03:54:21 +0000MEDIUM 5.4: A Cross-site scripting (XSS) vulnerability in the "View in Browser" feature in Elements-IT HTTP Commander 5.3.3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted SVG image.https://patchthecve.com/cve/CVE-2021-33211.htmlhttps://patchthecve.com/cve/CVE-2021-33211.htmlWed, 17 Jun 2026 03:54:21 +0000MEDIUM 6.5: A Directory Traversal vulnerability in the Unzip feature in Elements-IT HTTP Commander 5.3.3 allows remote authenticated users to write files to arbitrary directories via relative paths in ZIP archives.https://patchthecve.com/cve/CVE-2007-0583.htmlhttps://patchthecve.com/cve/CVE-2007-0583.htmlTue, 16 Jun 2026 22:35:52 +0000MEDIUM 4.3: Multiple cross-site scripting (XSS) vulnerabilities in HTTP Commander 6.0, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) LogoffMessage parameter to logofflast.aspx or the (2) txtUsername parameter to Default.aspx. NOTE: The provenance of this informahttps://patchthecve.com/cve/CVE-2003-1166.htmlhttps://patchthecve.com/cve/CVE-2003-1166.htmlTue, 16 Jun 2026 22:03:38 +0000MEDIUM 5.0: Directory traversal vulnerability in (1) Openfile.aspx and (2) Html.aspx in HTTP Commander 4.0 allows remote attackers to view arbitrary files via a .. (dot dot) in the file parameter.