https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2006-4770.htmlhttps://patchthecve.com/cve/CVE-2006-4770.htmlTue, 16 Jun 2026 22:29:45 +0000HIGH 7.5: PHP remote file inclusion vulnerability in menu.php in MiniPort@l 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the skiny parameter.https://patchthecve.com/cve/CVE-2003-0272.htmlhttps://patchthecve.com/cve/CVE-2003-0272.htmlTue, 16 Jun 2026 22:01:53 +0000HIGH 10.0: admin.php in miniPortail allows remote attackers to gain administrative privileges by setting the miniPortailAdmin cookie to an "adminok" value.https://patchthecve.com/cve/CVE-2002-0261.htmlhttps://patchthecve.com/cve/CVE-2002-0261.htmlTue, 16 Jun 2026 21:57:05 +0000HIGH 7.5: Directory traversal vulnerability in InstantServers MiniPortal 1.1.5 and earlier allows remote authenticated users to read arbitrary files via a ... (modified dot dot) in the GET command.https://patchthecve.com/cve/CVE-2002-0260.htmlhttps://patchthecve.com/cve/CVE-2002-0260.htmlTue, 16 Jun 2026 21:57:05 +0000HIGH 7.5: Buffer overflow in InstantServers MiniPortal 1.1.5 and earlier allows remote attackers to execute arbitrary code via a long login name, which is not properly handled by the logging utility.https://patchthecve.com/cve/CVE-2002-0259.htmlhttps://patchthecve.com/cve/CVE-2002-0259.htmlTue, 16 Jun 2026 21:57:05 +0000MEDIUM 4.6: InstantServers MiniPortal 1.1.5 and earlier stores sensitive login and account data in plaintext in (1) .pwd files in the miniportal/apache directory, or (2) mplog.txt, which could allow local users to gain privileges.