https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2008-5954.htmlhttps://patchthecve.com/cve/CVE-2008-5954.htmlTue, 16 Jun 2026 23:01:18 +0000MEDIUM 6.8: SQL injection vulnerability in KTP Computer Customer Database (KTPCCD) CMS, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the lname parameter in a login action to an unspecified component. NOTE: the provenance of this information is unknown; the dehttps://patchthecve.com/cve/CVE-2008-5953.htmlhttps://patchthecve.com/cve/CVE-2008-5953.htmlTue, 16 Jun 2026 23:01:17 +0000HIGH 7.5: Directory traversal vulnerability in KTP Computer Customer Database (KTPCCD) CMS, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the p parameter to the default URI.https://patchthecve.com/cve/CVE-2008-5952.htmlhttps://patchthecve.com/cve/CVE-2008-5952.htmlTue, 16 Jun 2026 23:01:17 +0000MEDIUM 6.0: SQL injection vulnerability in KTP Computer Customer Database (KTPCCD) CMS, when magic_quotes_gpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via the tid parameter in a vtech action to the default URI.