https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2007-2717.htmlhttps://patchthecve.com/cve/CVE-2007-2717.htmlTue, 16 Jun 2026 22:40:10 +0000HIGH 7.5: SQL injection vulnerability in shop/page.php in iGeneric (iG) Shop 1.4 allows remote attackers to execute arbitrary SQL commands via the type_id[] parameter, a different vector than CVE-2005-0537.https://patchthecve.com/cve/CVE-2007-0134.htmlhttps://patchthecve.com/cve/CVE-2007-0134.htmlTue, 16 Jun 2026 22:34:58 +0000HIGH 7.5: Multiple eval injection vulnerabilities in iGeneric iG Shop 1.0 allow remote attackers to execute arbitrary code via the action parameter, which is supplied to an eval function call in (1) cart.php and (2) page.php. NOTE: a later report and CVE analysis indicate that the vulnerability is present inhttps://patchthecve.com/cve/CVE-2007-0133.htmlhttps://patchthecve.com/cve/CVE-2007-0133.htmlTue, 16 Jun 2026 22:34:58 +0000HIGH 7.5: Multiple SQL injection vulnerabilities in display_review.php in iGeneric iG Shop 1.4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id or (2) user_login_cookie parameter.https://patchthecve.com/cve/CVE-2007-0132.htmlhttps://patchthecve.com/cve/CVE-2007-0132.htmlTue, 16 Jun 2026 22:34:58 +0000HIGH 7.5: SQL injection vulnerability in compare_product.php in iGeneric iG Shop 1.4 allows remote attackers to execute arbitrary SQL commands via the id parameter.https://patchthecve.com/cve/CVE-2006-5632.htmlhttps://patchthecve.com/cve/CVE-2006-5632.htmlTue, 16 Jun 2026 22:31:34 +0000MEDIUM 6.1: Cross-site scripting (XSS) vulnerability in change_pass.php in iG Shop 1.4 allows remote attackers to inject arbitrary web script or HTML via the id parameter, a different vulnerability than CVE-2006-5631. NOTE: the provenance of this information is unknown; the details are obtained solely from thihttps://patchthecve.com/cve/CVE-2006-5631.htmlhttps://patchthecve.com/cve/CVE-2006-5631.htmlTue, 16 Jun 2026 22:31:34 +0000MEDIUM 6.8: Cross-site scripting (XSS) vulnerability in change_pass.php in iG Shop 1.4 allows remote attackers to inject arbitrary web script or HTML via arbitrary query strings when the action parameter is not "1", as demonstrated using script in the action parameter, a different vulnerability than CVE-2006-56