https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2006-4156.htmlhttps://patchthecve.com/cve/CVE-2006-4156.htmlTue, 16 Jun 2026 22:28:31 +0000HIGH 7.5: PHP remote file inclusion vulnerability in big.php in pearlabs mafia moblog 6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pathtotemplate parameter. NOTE: a third party claims that the researcher is incorrect, because template.php defines pathtotemplate before https://patchthecve.com/cve/CVE-2006-2978.htmlhttps://patchthecve.com/cve/CVE-2006-2978.htmlTue, 16 Jun 2026 22:26:09 +0000MEDIUM 5.0: Mafia Moblog 0.6M1 and earlier allows remote attackers to obtain the installation path in an error message via a direct request to (1) big.php and (2) upgrade.php.https://patchthecve.com/cve/CVE-2006-2977.htmlhttps://patchthecve.com/cve/CVE-2006-2977.htmlTue, 16 Jun 2026 22:26:09 +0000HIGH 7.5: SQL injection vulnerability in big.php in Mafia Moblog 0.6M1 and earlier allows remote attackers to execute arbitrary SQL commands via the img parameter.