https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2008-5936.htmlhttps://patchthecve.com/cve/CVE-2008-5936.htmlTue, 16 Jun 2026 23:01:15 +0000MEDIUM 5.0: front-end/edit.php in mini-pub 0.3 and earlier allows remote attackers to read files and obtain PHP source code via a filename in the sFileName parameter.https://patchthecve.com/cve/CVE-2008-5883.htmlhttps://patchthecve.com/cve/CVE-2008-5883.htmlTue, 16 Jun 2026 23:01:09 +0000HIGH 7.8: Absolute path traversal vulnerability in front-end/dir.php in mini-pub 0.3 and earlier allows remote attackers to list arbitrary directories via a full pathname in the sDir parameter.https://patchthecve.com/cve/CVE-2008-5581.htmlhttps://patchthecve.com/cve/CVE-2008-5581.htmlTue, 16 Jun 2026 23:00:36 +0000HIGH 7.5: PHP remote file inclusion vulnerability in mini-pub.php/front-end/img.php in mini-pub 0.3 allows remote attackers to execute arbitrary PHP code via a URL in the sFileName parameter.https://patchthecve.com/cve/CVE-2008-5580.htmlhttps://patchthecve.com/cve/CVE-2008-5580.htmlTue, 16 Jun 2026 23:00:36 +0000HIGH 7.5: mini-pub.php/front-end/cat.php in mini-pub 0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the sFileName argument.https://patchthecve.com/cve/CVE-2008-5579.htmlhttps://patchthecve.com/cve/CVE-2008-5579.htmlTue, 16 Jun 2026 23:00:36 +0000MEDIUM 5.0: Absolute path traversal vulnerability in mini-pub.php/front-end/cat.php in mini-pub 0.3 allows remote attackers to read arbitrary files via a full pathname in the sFileName parameter.