https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2002-1009.htmlhttps://patchthecve.com/cve/CVE-2002-1009.htmlTue, 16 Jun 2026 21:58:33 +0000HIGH 7.5: Cross-site scripting vulnerability in PowerBASIC pbcgi.cgi, as included in Lil' HTTP web server, allows remote attackers to execute arbitrary web script in other web browsers via the (1) "Name" or (2) "E-mail" parameters.https://patchthecve.com/cve/CVE-2002-1008.htmlhttps://patchthecve.com/cve/CVE-2002-1008.htmlTue, 16 Jun 2026 21:58:33 +0000HIGH 7.5: Cross-site scripting vulnerability in PowerBASIC urlcount.cgi, as included in Lil' HTTP web server, allows remote attackers to execute arbitrary web script in other web browsers via a request to urlcount.cgi that contains the script, which is not filtered when the REPORT capability prints the originhttps://patchthecve.com/cve/CVE-2002-0304.htmlhttps://patchthecve.com/cve/CVE-2002-0304.htmlTue, 16 Jun 2026 21:57:10 +0000MEDIUM 5.0: Lil HTTP Server 2.1 allows remote attackers to read password-protected files via a /./ in the HTTP request.