https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2007-1635.htmlhttps://patchthecve.com/cve/CVE-2007-1635.htmlTue, 16 Jun 2026 22:38:00 +0000HIGH 9.0: Static code injection vulnerability in admin/settings.php in Net Portal Dynamic System (NPDS) 5.10 and earlier allows remote authenticated users to inject arbitrary PHP code via the xtop parameter in a "ConfigSave" op to admin.php, which can later be accessed via a "Configure" op to admin.php.https://patchthecve.com/cve/CVE-2007-1634.htmlhttps://patchthecve.com/cve/CVE-2007-1634.htmlTue, 16 Jun 2026 22:37:59 +0000HIGH 7.5: Variable extraction vulnerability in grab_globals.php in Net Portal Dynamic System (NPDS) 5.10 and earlier allows remote attackers to conduct SQL injection attacks via the _FILES[DB][tmp_name] parameter to print.php, which overwrites the $DB variable with dynamic variable evaluation.https://patchthecve.com/cve/CVE-2006-2952.htmlhttps://patchthecve.com/cve/CVE-2006-2952.htmlTue, 16 Jun 2026 22:26:06 +0000MEDIUM 5.0: Directory traversal vulnerability in Net Portal Dynamic System (NPDS) 5.10 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) sequence and trailing null (%00) byte in the (1) Default_Theme parameter to header.php or (2) ModPath parameter to modules/cluster-paradise/clustehttps://patchthecve.com/cve/CVE-2005-1804.htmlhttps://patchthecve.com/cve/CVE-2005-1804.htmlTue, 16 Jun 2026 22:13:43 +0000HIGH 7.5: Multiple SQL injection vulnerabilities in Net Portal Dynamic System (NPDS) 5.0 allow remote attackers to execute arbitrary SQL commands via the (1) terme parameter in the glossaire module (glossaire.php) or (2) query parameter to links.php.https://patchthecve.com/cve/CVE-2005-1803.htmlhttps://patchthecve.com/cve/CVE-2005-1803.htmlTue, 16 Jun 2026 22:13:43 +0000MEDIUM 4.3: Multiple cross-site scripting (XSS) vulnerabilities in Net Portal Dynamic System (NPDS) 5.0 allow remote attackers to inject arbitrary web script or HTML via the language parameter to (1) admin.php, or (2) powerpack_f.php, (3) the sitename parameter to sdv_infos.php, (4) the categories parameter to